Title: Google malware
Last modified: September 23, 2020

---

# Google malware

 *  Resolved [karimcuriel](https://wordpress.org/support/users/karimcuriel/)
 * (@karimcuriel)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/)
 * Hi guys, recently google stopped us a campaign saying this url is detected as
   malware “[https://slider.flexible-theme.com/assets/css/settings.css&#8221](https://slider.flexible-theme.com/assets/css/settings.css&#8221);
   we are searching all our plugins and code and seems this url is from metaslider,
   is there any way to know how to reach this library and prevent this?
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fgoogle-malware%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 7 replies - 1 through 7 (of 7 total)

 *  [Kevin Batdorf](https://wordpress.org/support/users/kbat82/)
 * (@kbat82)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13446907)
 * Hi,
 * > seems this url is from metaslider,
 * I’ve never seen this file before. What indication is there that this is from 
   MetaSlider?
 *  Thread Starter [karimcuriel](https://wordpress.org/support/users/karimcuriel/)
 * (@karimcuriel)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13446935)
 * Thanks, well, google just give us that url via support, and we have been seeking
   everywhere on db, code, files and comments, and then we reach searching in google
   some similar urls that sends us to thinks in metaslider and is one of the plugins
   we have actually installed on our wp site, not exactly the url, but we came here
   to ask if maybe could be an old library of the plugin, etc.
 *  [Kevin Batdorf](https://wordpress.org/support/users/kbat82/)
 * (@kbat82)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13446952)
 * Hi,
 * We have a file at yoursite.com/wp-content/plugins/ml-slider/admin/assets/css/
   settings.css but the content is only a few lines. If you navigate to that file
   you should be able to confirm it matches.
 *     ```
       .metaslider_page_metaslider-settings #ms-toolbar {
       	@apply sticky;
       }
       .metaslider_page_metaslider-settings #wpfooter {
       	@apply hidden;
       }
       ```
   
 *  Thread Starter [karimcuriel](https://wordpress.org/support/users/karimcuriel/)
 * (@karimcuriel)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13446970)
 * Thanks for the info [@kbat82](https://wordpress.org/support/users/kbat82/) we
   dont have that file as you can see here [https://prnt.sc/umux0l](https://prnt.sc/umux0l)
 *  [Kevin Batdorf](https://wordpress.org/support/users/kbat82/)
 * (@kbat82)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13447041)
 * You’re on 3.16.4 and the latest is 3.18.1. However, the original file from your
   report is not from MetaSlider. It’s just a coincidence that the file name matches
   one that we include (which you never even had).
 * Was it the word “slider” that led you to think it was from MetaSlider?
 * Have you searched the database fort hat reference?
 * Can you share the URL Google provided that the malware was on? Even if it’s not
   MetaSlider, I’m happy to take a quick look at the page in question to see if 
   anything stands out.
 *  Thread Starter [karimcuriel](https://wordpress.org/support/users/karimcuriel/)
 * (@karimcuriel)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13447080)
 * Thanks, yes we updated the metaslider plugin to the last version just today. 
   Well google support only give us this:
 * Classification: compromised_landing_page
 * Timestamp: 2020-09-14 11:05 AM
 * Reason(s):
 * [https://slider.flexible-theme.com/assets/css/settings.css](https://slider.flexible-theme.com/assets/css/settings.css)
 * Classification: compromised_landing_page
 * Timestamp: 2020-09-14 11:05 AM
 * Reason(s):
 * [https://slider.flexible-theme.com/assets/css/settings.css](https://slider.flexible-theme.com/assets/css/settings.css)
 * But we dont have any more info about where is it. Thanks a lot for the replies,
   i dont want you to work outside somenthing from metaslider. Have a great day 
   and again, thanks for the response. 🙂
 *  [Kevin Batdorf](https://wordpress.org/support/users/kbat82/)
 * (@kbat82)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13447124)
 * Strange. Well, I’d just check your site for that reference and remove it. Maybe
   do a full scan for malware as well. Best of luck!

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Google malware’ is closed to new replies.

 * ![](https://ps.w.org/ml-slider/assets/icon.svg?rev=3568997)
 * [Slider, Gallery, and Carousel by MetaSlider - Image Slider, Video Slider](https://wordpress.org/plugins/ml-slider/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ml-slider/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ml-slider/)
 * [Active Topics](https://wordpress.org/support/plugin/ml-slider/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ml-slider/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ml-slider/reviews/)

 * 7 replies
 * 2 participants
 * Last reply from: [Kevin Batdorf](https://wordpress.org/support/users/kbat82/)
 * Last activity: [5 years, 8 months ago](https://wordpress.org/support/topic/google-malware/#post-13447124)
 * Status: resolved