Title: WARNING: POTENTIAL MALWARE BACKDOOR CODE
Last modified: May 26, 2018

---

# WARNING: POTENTIAL MALWARE BACKDOOR CODE

 *  [opendrives](https://wordpress.org/support/users/opendrives/)
 * (@opendrives)
 * [8 years ago](https://wordpress.org/support/topic/warning-potential-backdoor-code/)
 * I installed this plugin today and my security monitoring software flagged it 
   potentially containing a PHP malware backdoor script.
 * Warning: File possibly compromised: ./wp-content/plugins/fast-velocity-minify/
   inc/functions-serverinfo.php (php.backdoor.system_shell.005). Manual review recommended.
    -  This topic was modified 8 years ago by [opendrives](https://wordpress.org/support/users/opendrives/).

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Raul P.](https://wordpress.org/support/users/alignak/)
 * (@alignak)
 * [8 years ago](https://wordpress.org/support/topic/warning-potential-backdoor-code/#post-10326223)
 * It’s a false positive, and “potential” doesn’t mean it is.
 * There’s no malware or backdoor, and this has also already been discussed here:
   
   [https://wordpress.org/support/topic/malware-alert-3/](https://wordpress.org/support/topic/malware-alert-3/)
 * The serverinfo.php page, is what you see when you click on the Server Info tab.
 * That page exists for you to be able to diagnose what your server is running, 
   so it’s basically an information page that fetches technical information from
   the server and shows it there.
 * Furthermore, the plugins are manually reviewed by the WordPress Team, before 
   going live, precisely to avoid that kind of malware situation.
 *  Thread Starter [opendrives](https://wordpress.org/support/users/opendrives/)
 * (@opendrives)
 * [8 years ago](https://wordpress.org/support/topic/warning-potential-backdoor-code/#post-10327820)
 * Ah, I see. My apologies for the freak out.
 *  Plugin Author [Raul P.](https://wordpress.org/support/users/alignak/)
 * (@alignak)
 * [8 years ago](https://wordpress.org/support/topic/warning-potential-backdoor-code/#post-10356280)
 * For the record, I reached out to sucuri and their answer was that they are aware
   of the false positive and that they were rolling out an update progressively,
   to their clients.
 * [https://cdn.pbrd.co/images/Ho7jyYp.png](https://cdn.pbrd.co/images/Ho7jyYp.png)
 * Thanks again.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘WARNING: POTENTIAL MALWARE BACKDOOR CODE’ is closed to new replies.

 * ![](https://ps.w.org/fast-velocity-minify/assets/icon-128x128.jpg?rev=1440946)
 * [Fast Velocity Minify](https://wordpress.org/plugins/fast-velocity-minify/)
 * [Support Threads](https://wordpress.org/support/plugin/fast-velocity-minify/)
 * [Active Topics](https://wordpress.org/support/plugin/fast-velocity-minify/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/fast-velocity-minify/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/fast-velocity-minify/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [Raul P.](https://wordpress.org/support/users/alignak/)
 * Last activity: [8 years ago](https://wordpress.org/support/topic/warning-potential-backdoor-code/#post-10356280)