infection found within a WordFence file

Hello JuliaKline,
the file is not infected but it contains your domain name and your domain name is currently reported as “unsafe” by Google Safe Browsing. That is why you are getting a warning about the file. You can check the status of your domain name here.

@wfasa – thank you for that information it’s helpful.

So what you’re saying is that any file containing my domain name would produce a warning about that file?

That’s curious, because for example WordFence is giving me warnings for about 35 images on my site: “Post contains a suspected malware URL” – where the URL in question is the link to a .jpg I’ve uploaded. But it’s not giving me warnings for ALL the images I’ve uploaded to my site.

If what your’e saying is true, then how come WordFence isn’t telling me every single image on my site is potentially unsafe??

Hello Julia,
Maybe it only warns when you have actually included an image, not when you have simply uploaded one? Wordfence doesn’t warn you about the URL to your own site unless that URL appears in a text field (hidden or visible). In other words, it’s not warning you about the images themselves, it’s warning you about the URL to the image (because the URL contains a domain that has been flagged by Google Safe Browsing).

I guess I wasn’t clear. What I meant was, I have more than a hundred posts, all of which have an image. But wordfence is only flagging about 35 or so of those images.

Can you screenshot the scan results? That might help us give you a more clear answer.

tim

Hello,

Same issue. I installed Wordfence and in the first scan I get an alert of wordfence file infected.

Thanks

Hi paulabender,

This is not the same issue. Your warning is about a malicious file. The file “template.php” does not belong to to Wordfence. It was added by the malware that has infected your site. Malware can add files anywhere on your server, including in Wordfence and other plugin folders.