An invalid file was requested for deletion.

  • Resolved digitell

    (@digitell)


    3 years, 10 months ago

    I got this “An invalid file was requested for deletion” when trying to delete the file that was reported as being malicious. The file is : gigabyte_captcha.php

    More info is:
    File Type: Not a core, theme, or plugin file from www.remarpro.com.
    Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: $AkkTFsaAtXFCBTDa=”AFoDqWv6nEhI7jOdCygN3KxlfwPX95HLcs1_mkQa4BG8RzuMr0TVteJYpbS2ZiU”;$bMgKaBqdkfmas=$AkkTFsaAtXFCBTDa[57] . $AkkTFsaAtXFCBTDa[39] .\x0a $AkkTFsaAtXFCBTDa[33] . $AkkTFsaAtXFCBTDa[53].$AkkT…

    The issue type is: Backdoor:PHP/yzep.4503
    Description: A backdoor known as yzep

    Is there a way to fix this?

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @digitell,

    It could mean that the file has already been removed, or was a cached page by a plugin such as W3 Total Cache that is no longer present. You can use FTP/SSH or any file manager your web host provides to see if the file actually exists on the server. If it does, it may instead be a permissions issue. You can then try removing the file via FTP instead. If that also fails, you may have to reach out to your web host for assistance in removing the files.

    Let me know how you get on!

    Thanks,

    Peter.

    Thread Starter digitell

    (@digitell)

    Hello Peter,Thank you for your help. Yes I did go look in my FTP and the file is indeed there.However..I hesitated on trying to delete it..I dont know if it is a valid file for sure or not.?Do? you think it would be OK to remove it?..or try to?
    Thank you again for your help!
    Christina

    Plugin Support wfpeter

    (@wfpeter)

    Hi @digitell,

    I can’t find any reference to that filename at all in any WordPress plugin repositories or websites so I feel it’s safe to trust the assessment that this file should be removed rather than feel it’s flagging a false positive.

    However, to give you more background before you decide, Wordfence uses the www.remarpro.com repository to track all latest-version plugin files, along with the current WordPress installation itself. When it finds a file that isn’t part of that repository (and if you did not create that file yourself), it is likely to be correct. Some caching plugins can create HTML files based on your dynamic pages to speed up loading times, but unless the filename seems familiar to a URL on your site, again my advice would be to remove.

    Thanks,

    Peter.

    Thread Starter digitell

    (@digitell)

    Hello Peter,
    Thank you so very much for your advice and guidance. I will delete that file then.
    Many thanks!
    Christina

    Plugin Support wfpeter

    (@wfpeter)

    Thank-you @digitell, if you have further Wordfence questions in the future please open up a new topic and we’ll be glad to help you any time!

    Thread Starter digitell

    (@digitell)

    So very kind of you Peter! Thank You! I did delete that file and things are running OK so many thanks! ??

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘An invalid file was requested for deletion.’ is closed to new replies.