eval – should I panic now?

  • Resolved madfcat

    (@madfcat)


    4 years, 8 months ago

    I scanned my wordpress site with your script for the first time in my life and I get

    Potential Threats
  * NOTE: These are probably not malicious scripts (but it's a good place to start looking IF your site is infected and no Known Threats were found).

    Should I panic now?

    ?.../httpdocs/wp-admin/includes/class-pclzip.php
?.../httpdocs/wp-content/plugins/duplicator/installer/dup-installer/classes/Crypt/Base.php
?.../httpdocs/wp-content/plugins/duplicator/lib/snaplib/wordpress.core.files.php
?.../httpdocs/wp-content/plugins/duplicator-pro/classes/utilities/wordpress.core.files.php
?.../httpdocs/wp-content/plugins/duplicator-pro/lib/snaplib/wordpress.core.files.php
?.../httpdocs/wp-content/plugins/js_composer/assets/lib/bower/ace-builds/src-min-noconflict/worker-css.js
?.../httpdocs/wp-content/plugins/js_composer/assets/lib/bower/json-js/json2.min.js
?.../httpdocs/wp-content/plugins/js_composer/assets/lib/bower/lessjs/dist/less.min.js
?.../httpdocs/wp-content/plugins/js_composer/assets/lib/php.default/php.default.min.js
?.../httpdocs/wp-content/plugins/js_composer/include/classes/editors/class-vc-backend-editor.php
?.../httpdocs/wp-content/plugins/js_composer/include/classes/editors/class-vc-frontend-editor.php
?.../httpdocs/wp-content/plugins/meta-box/js/jqueryui/jquery-ui-timepicker-addon.min.js
?.../httpdocs/wp-content/plugins/revslider/public/assets/js/rs6.min.js
?.../httpdocs/wp-content/plugins/sitepress-multilingual-cms/lib/twig/src/Environment.php
?.../httpdocs/wp-content/plugins/sitepress-multilingual-cms/lib/twig/src/Test/IntegrationTestCase.php
?.../httpdocs/wp-content/plugins/woocommerce-shipping-tracking/classes/acf/assets/inc/timepicker/jquery-ui-timepicker-addon.js
?.../httpdocs/wp-content/plugins/woocommerce-shipping-tracking/classes/acf/assets/inc/timepicker/jquery-ui-timepicker-addon.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/blocks-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/dynamic-blocks-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/workouts-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-admin-redirects-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-custom-fields-plugin-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-elementor-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-metabox-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-quickedit-notification-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-redirect-notifications-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-redirect-notifications-gutenberg-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/wp-seo-premium-schema-blocks-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/yoast-premium-prominent-words-indexation-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/yoast-premium-social-metadata-previews-1670.min.js
?.../httpdocs/wp-content/plugins/wordpress-seo-premium/assets/js/dist/yoast/social-metadata-previews-1670.min.js

    All these files have eval in it?

Viewing 1 replies (of 1 total)
  • Plugin Author Eli

    (@scheeeli)

    4 years, 8 months ago

    Probably not, as the Note says “These are probably not malicious scripts”.

    These mostly look like pretty standard plugins to me but what you need to do is to download the latest definition updates first and then run the complete scan again. As all those red warnings on the Anti-Malware Setting page are likely telling you that you are not using the latest malware definitions. If you just installed this plugin for the first time then you’ll need to download the definitions for it to be any good at finding and identifying the latest threats.

    Once that is done then please let me know if you still have any questions about the scan results.

Viewing 1 replies (of 1 total)

The topic ‘eval – should I panic now?’ is closed to new replies.