Google Malware Warning

Did Google provide any details about what they found?

We have a guide for cleaning hacked sites here, which shows how to use additional scans in Wordfence, and some other options outside of Wordfence:
How to clean a hacked site using Wordfence

You might not be able to do all of the steps listed, depending on what type of access you have. If you still don’t see any results, try viewing the “.htaccess” folder in the main folder of your site — sometimes redirects are hidden there, and they may not be found by certain scans.

-Matt R

Thanks Matt.

Google say its Undetermined malware.
My .htaccess file looks ok.

I read the link you gave and while checking my site’s files, I noticed a directory outside of my WP install that had an index file with a redirect to dsnextgen.com
I deleted it immediately along with some directories inside my installation that had ‘-old’ appended to their names.

Some time last week I noticed some malicious .jpg files were uploaded to my site via a form I placed on a page… though I deleted the files, the form and the page, I didn’t have this option in Wordfence enabled until today:
“Disable Code Execution for Uploads directory”

Before today, whenever I tried to delete files or folders in my WP install, they never went away even via ftp. But now all deletes are going clean, so I kinda feel things are better now.

All this while, my web host has scanned my website at least twice reporting that there were no viruses detected while Wordfence also said there’s no security problems.

Ok. That’s good that deletes are working properly now — it might be that some of the permissions were incorrect, and perhaps the host fixed them when they were trying to help.

For the missed malware — that probably means that it is a new variant we have not seen yet. The extra folder wouldn’t be scanned without the option enabled to scan files outside of your WordPress installation, but would be once that is enabled.

If you ask Google to check your site again after having removed that folder, do they say it is fixed now, or is there still an issue? If you don’t mind posting the domain here, I can check a couple items, too.

-Matt R

I really appreciate your support.
My host were very helpful indeed and I posted this matter at a webmasters forum too – someone there identified the issue as coming from a small advertising code I inserted and thus, the problem was actually coming from the ads delivery network.

Here’s my link: https://lovexpress.net

Google has cleared it now.

Thanks so much once again.

Great, thanks for following up, and I’m glad the issue has been cleared up!

-Matt R