VirusDie and wp-load.php
-
I have about 40 websites in WordFence central. All of these websites are also added to the services of VirusDie, which has been very helpful in the past. This tool apparently edits wp-load.php in such a way it triggers a high or critical warning from WF. I don’t want to click Ignore, because the file should be monitored. But if I choose to ignore until the file is changed, the warning re-appears on all my websites in a matter of days, although the warning is exactly the same as before. Is there a way to never get the warning again if the added code is still the same? All those (dark) red labels make it easy to overlook a real threat, because you think it’s the warning you can ignore.
The warning look like this:
This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is:?<?php defined(‘FW_FILEPATH’)||isset($_SERVER[‘DOCUMENT_ROOT’])&&define(‘FW_FILEPATH’,$_SERVER[‘DOCUMENT_ROOT’].’/vdconnect-xxxxxxxx/firewall/index.php’)&&is_file(FW_FILEPATH)&&(include(FW_FILEPATH));?…
Instead of the xx’s is my unique VirusDie number.
I would love to know if you have a solution.
Kind regards,
Anita
- The topic ‘VirusDie and wp-load.php’ is closed to new replies.