Malicious file class-curl-parser-session.php

Hi @redswirl, thanks for checking in with this.

I don’t have that file as part of the default WordPress installation and also can’t see it in relation to a plugin or repository file. I also checked “parse” rather than “parser”, but drew a blank.

My recommendation would be to take a local backup of the file and try removing it. See if it stays gone or a plugin stops working as it should. It’s not good practice to add files to WordPress core but not totally unheard of so good to have a backup just in case.

If you’re ever suspicious of the contents of a file and Wordfence isn’t picking up a specific malware or threat, you can send it to samples @ wordfence . com so our team can check it out and advise you on the next steps.

Thanks,
Peter.

Hey @redswirl,

Great advice by Peter. I would also contact your host for input. Many hosts offering shared hosting plans, like GoDaddy, will modify and/or add files to WordPress core to suit their needs.

Cheers ??

Thanks very much guys. The host is so pathetic but trying to get the client to change is a nightmare. I’ve removed the file and so far so good. Very much appreciate the help. BTW samples @ wordfence . com is not willing to help because I have a free account. In fact the person I dealt with was extremely rude. So I really appreciate the help I got here. Have a great weekend!