I am facing the same problem since the recent update of Wordfence. The malware scan skips the ‘/media’ path of my WordPress Installation and displays a notification. This is the first time in two years I get this notification. The ‘/media’ path has always existed on my website.
Marco
I’ve got ‘5 paths were skipped for the malware scan due to scan settings’. Not sure what these settings actually are as I haven’t changed anything!
Jane
Thanks for reaching out.
There is a UI bug that was in the last release that involves the new scan that checks for paths that are not scanned by default. Even if a user has no issues listed at the end of the scan, the Malware Scan icon can show a yellow triangle at the end of the scan. We have fixed this issue in version 7.4,.4 which is now available. Please update to that version as soon as you are able.
The file paths that were skipped were because the scan option “Scan files outside your WordPress installation” used to not be enabled by default. A regular Wordfence scan looks at the following: wp-admin, wp-content, wp-includes, all subdirectories of those directories – all files in your base WordPress directory. But when you enable this option, it scans all subdirectories of your WordPress installation, even if they aren’t part of WordPress. So if you have a directory that is a phpmyadmin installation or a Drupal installation, we will dive down into those directories looking for malicious code and infections, too. We decided to enable this by default to make sure we were getting the best scan results for you. You can enable it in the Scan Options section of the Scan > Scan Options and Scheduling page.
Tim
@wfsupport
Are you sure, you fixed this issue in version 7.4..4.?
I just updated and have the same issue exactly with version 7.4.4.
The paths skipped are ~/.quarantine and ~/.tmb
Any solution?
-
This reply was modified 6 years, 4 months ago by
WP Gang.
Same here. I still get the yellow triangle after I perform a scan. Only when I check the option ‘Scan files outside your WordPress installation’ the yellow triangle doesn’t appear after I perform a scan.
Please advise
I had 2 sites out of about 20 that I had to enable the scan outside of wp files to avoid the malware icon in yellow. Think it might need to be enabled in certain cases, but I will let admins answer better. Also, I had to clear the database and cache for malware icon not to show using WP Rocket.
-
This reply was modified 6 years, 4 months ago by
donniam. Reason: added more useful info
I am still having this problem on all 3 of my sites.
Mike
Me, too, on multiple sites with version 7.4.5
