Wordfence and Google flagging a malware problem with file names

Beaver Builder
1

Hi support, I’ve had a problem with a site being flagged as containing malware.
A developer has advised:

'Google flag may need to be resolved after discussion with BeaverBuilder as you’re currenty modifying the site more cache files will be created and will cause the site to be flagged again after being submitted for a rescan.

I’ve cleared the Beaver Builder cache and ran the Wordfence scan again which has now reported only the header1.jpg image being considered malicious, the previous .js files have been removed from cache.
For this you may have to contact BeaverBuilder to inform them that Wordfence is flagging their cache as malicious and they may be able to resolve the issue as whenever you make edits using the builder new cache files are generated which will make Wordfence and possibley Google continue to flag these files.’

2

Hey Gerry,

Did they say if there was anything in particular about those files that would cause them to be flagged? We run Beaver Builder + WordFence on a lot of our client sites and haven’t seen anything like this yet. It’s possible that you have a piece of content unrelated to Beaver Builder that is getting flagged.

The next time this comes up, can you shoot me temporary admin access to check it out?

Thanks,
Justin

3

Hi Justin,

Thanks for support. There were 5 files named, this is typical of the alerts:
Critical Problems:

  • File contains suspected malware URL: /home/sites/francistransport.com/public_html/wp-content/uploads/bb-plugin/cache/9-layout.js

Thanks, Gerry

4

Hi Justin,

This is what my hosting company support said earlier:

‘The wordfence logs flag the Beaver Builder cache files as being malicious. While these don’t look malicious and the plugin is genuine, I can see how the .js strings in these files could be flagged as malicious by google and wordfence. Advise them the files have been flagged by wordfence.’

Gerry

5

Hi Gerry,

File contains suspected malware URL:

This leads me to believe that a URL that you have entered is being flagged as malware.

Can you send me temporary admin access to test?

Justin

6

[Content Hidden]

7

Hey Gerry,

It looks like the errors are showing up because the Beaver Builder JS file has links to your site which has been flagged by Google for malware.

The JS file is fine, but since it contains links to a suspected malware site (in this case yours), it is getting flagged.

You’ll need to look into why Google is flagging your site. A quick check shows that they think malicious software is hosted on your site by marketmyfirm.org/.

If you believe your site is fine, you can request a review by Google… https://support.google.com/webmasters/answer/168328?hl=en

I hope that helps!

Justin

8

[Content Hidden]

9

Hi Justin,

Thanks for looking into this for me. The site was flagged for malware about 10 days ago by Google. I took steps to resolve this by deleting all of the old site files and database, installed a new version of Wordpress and rebuilt the site with Beaver Builder. I then requested a review of the site by Google. As far as I’m aware the site is now clean, I’m going around in circles with this at the moment!

As far as I can tell the malware issues are historical and not on current site.

Thanks, Gerry

10

You’re welcome, Gerry. I’m seeing the “The site ahead contains malware” message when visiting your site in Chrome, so it does look like Google is still seeing something. You might try submitting it for review again.

Justin

11

Thanks Justin. This is proving to be a bit of a nightmare! I’ve requested a review from Google again and have also asked my developer if he can confirm that the problem being flagged refers to the old site. Hopefully that’s the case although it doesn’t solve the immediate problem of the site being blacklisted.

Gerry