leandrosilvaarq

I’ll try to determine which of the other installed plugins (Flying Scripts, Smush or WebP Express) could be causing this.
The hosting support informed us that everything was fine and that we can ignore the notification.
Thanks @vmarko.

• This reply was modified 2 months, 1 week ago by leandrosilvaarq.

Hi, Please find below the latest web server error log messages.
Link: https://filebin.net/2tuxae4u8xg94rn9
I hope it will be useful.

Hi @joostdevalk,
Thank you for your message.
I’m not sure if there are any logs remaining after removing the plugin.
How can I find those logs? (Sorry, I’m not an expert).

No, unfortunately the notification remains.

Hello @vmarko,

Thank you for your prompt response and the information provided.

We have already installed W3 Total Cache v2.7.5 (free version). Do we need to make any changes to the settings manually, or should the Site Status notification automatically disappear after an upcoming W3TC update?

We appreciate your continued support and assistance with our questions.

Thanks again!

Hello @611shabnam

Thank you for the very useful suggestions!

Below, I detail all the procedures I followed to “resolve” the issue:

Site Health Status (https://ibb.co/QkQBHS9)
? Everything is fine, just a recommendation for SQL server optimization (MySQL version 8.0) which our hosting provider does not yet offer.

Plugins and Semplice
? I deactivated almost all plugins, keeping Yoast SEO and the Semplice theme active.

WordPress
? Although the images are inserted and managed within Semplice, I went to Pages within WordPress, edited each page (Social tab), deleted the existing images, and re-added them directly in WordPress.

Plugins
? I reactivated all the plugins that I had deactivated.

Sharing Debugger
? Everything is working again on all pages!

I suspect the issue was related to the update of one of the installed plugins (perhaps, W3 Total Cache which affects website optimization, but I’m not sure).

I leave these “steps” as a possible solution for other users facing the same problem. Hope it helps.

Thanks again!

Best regards,
Leandro Silva

Hello @maybellyne

Thank you for your reply.

The issue seems to be occurring with all of our website links:
https://www.oxygen.pt
https://www.oxygen.pt/unreal-en
https://www.oxygen.pt/unreal-fr
https://www.oxygen.pt/unreal-pt

Hello @vmarko,

Thank you for the feedback.

The solution provided by our hosting is to directly contact an external company (Sitelock) to assess and remove the malware.
Honestly, it’s not a solution that we’re very pleased with.
Perhaps the best course of action will be to remove the 150 posts published to date and republish them one by one again (from scratch).

Thanks once again!

• This reply was modified 8 months, 4 weeks ago by leandrosilvaarq.

Hello @vmarko,

Those keywords are related to the “Semplice” theme used on the website, so I can’t correctly identify which specific pages those keywords are being used on.

If I’m not mistaken, the other plugin only allows adding keywords in a general manner and does not apply them to specific pages (it only allows excluding keywords on specific pages).

Thank you!

Hello @vmarko,
Thanks for your contact.
Yes, even with W3 Total Cache disable, cache folder deleted, the malware notification persists.
https://i.ibb.co/wry8XDm/1.jpg

Hello @vmarko,

Thanks for your reply.

I disabled Minify and then added the following keywords (based on the list of files identified as unused) to Flying Scripts:

js/shared.scripts.min.js
js/frontend.scripts.min.js
js/frontend.min.js
js/mediaelement/mediaelement-and-player.min.js
js/mediaelement/mediaelement-migrate.min.js
js/jquery/jquery.min.js

css/frontend.min.css
css/dist/block-library/style.min.css

js/lazyload.min.js

I attempted to add keywords one by one (to observe the outcome), but each time I added one, the website ceased to function properly (everything appeared blank) due to the inclusion of those keywords in Flying Scripts.

Thanks!

Hi @vmarko.
Thanks for your reply.
Unfortunately it didn’t work… if I try to open a post directly from WordPress, it identifies the post page as malware…
If I create a new post, the post page opens without any issue.

Hello @vmarko,

Thank you for your response and solution.

Disabling Minify shows the following list of files identified as unused:

/wp-content/themes/semplice6/assets/js/shared.scripts.min.js?ver=6.2.4
/wp-content/themes/semplice6/assets/js/frontend.scripts.min.js?ver=6.2.4
/wp-content/themes/semplice6/assets/js/frontend.min.js?ver=6.2.4
/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.4.3
/wp-includes/js/jquery/jquery.min.js?ver=3.7.1

/wp-content/themes/semplice6/assets/css/frontend.min.css?ver=6.2.4
/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3

/wp-content/plugins/w3-total-cache/pub/js/lazyload.min.js

“Semplice” is the theme we use for website development, so I’m unsure if it’s possible to delay/delete any of the files mentioned above using the other plugin.

With Minify turned off, if I add them in the other plugin, activate Minify, and the website stops working, can I revert those changes? Or will I need to remove W3 Total Cache, delete the folders in cPanel, and reinstall it again?

Thanks in advance.

Best regards,
Leandro