• Resolved davebach

    (@davebach)


    Hi. Love the plugin and just used it to find some nasty malware… and promptly donated to your cause.

    I have not delved in extensively, but I noticed I received alerts for ithemes-sync/api.php on the sites I’ve scanned. I checked the file against the latest version I downloaded and it’s the way the developer intended.

    So is this just some code that has a legit purpose and being flagged? I thought I’d ask or at the least notify you since I use it on many sites and I know the plugin is popular and the developer is reputable.

    One last thing… I had been manually deleting the files that are found because the first time I tried “fix automatically” the offending malware was not actually deleted. I think of 5 files, 4 were zero K and one was intact.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Eli

    (@scheeeli)

    That iThemes Sync file is ok, that was a false positive. I just released a definition update to fix that.

    As for deleting the file, you can usually delete them if it is completely malicious but sometimes there are required files that have malicious code added to them and the good code needs to stay. My plug was designed to remove the malicious content but never delete any files just in case that file is required.

    Please let me know if you have any more questions.

    Aloha, Eli

    Thread Starter davebach

    (@davebach)

    Thanks for being on top of this.

    Note to everyone, please donate.

    Dave

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Alert for iThemes Sync’ is closed to new replies.