Viewing 4 reply threads
  • Author
    Posts
    • #6803
      kabadabra
      Member

      Hi Steve,

      We got a message from Sucuri saying that malware has been detected. After going through the various plugins and testing, we found it to be “wp-helpers”.
      See: https://dl.dropboxusercontent.com/s/n89kw4efv2den4l/2016-06-27%20at%2015.14.jpg

      After removing the plugin, re-scanned and no Malware was found. I downloaded a fresh copy, in case our server was compromised, and this was not the case. Again, Sucuri finds malware in the plugin directly downloaded from https://wordpress.org/plugins/wp-helpers/.

      I thought I would make this aware to you and hoping your team could investigate this? What is also seems to do is kill off the 404 page and just leaves a blank page with no redirect / error messages.

      Let me know your thoughts. Thanks!

    • #6816
      kabadabra
      Member

      Being upgraded from an older version, there also seems to be a bug with saving the “301 Redirect” option. I can set it to any other page, but when “No” is selected, it does not get saved.

      See: https://dl.dropboxusercontent.com/s/czb09ya1drppl7c/2016-06-27%20at%2018.28.jpg

      I think this is what may be causing the blank page issue on a 404 page.

    • #6827
      Steve
      Keymaster

      @kabadabra– Is Sucuri giving you any other information? Like which file? You are the only one to report this. Also, how can I reproduce this report?

      As for the redirects, we just released v1.11.0 which should fix all redirect issues.

    • #6828
      kabadabra
      Member

      @steve – Thanks for the quick fix/update. Updated, re-tested and Sucuri no longer reports the malware/security issue. I think it’s safe to say it’s a problem with their algorithm most likely when detecting a 500 error.

      Redirect working as expected now too, thanks!!

    • #6829
      Steve
      Keymaster

      Great! Closing ticket.

Viewing 4 reply threads
  • The topic ‘WP Helpers Malware (Urgent)’ is closed to new replies.