1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Wordfence says it's backdoor malicious

Discussion in 'General Scripting Chat' started by wpblog, Apr 12, 2017.

Thread Status:
Not open for further replies.
  1. wpblog

    wpblog Registered Member

    Joined:
    Oct 19, 2010
    Messages:
    80
    Likes Received:
    23
    Home Page:
    I use Shcema theme (download from BHW) for my WordPress site.
    The Wordfence scans and shows
    "File appears to be malicious: wp-content/themes/schema/functions.php"
    "The text we found in this file that matches a known malicious file is: "<?php\x0a\x0aif (isset($_REQUEST['action']) && isset($_REQUEST['password']) && ($_REQUEST['password'] == '21c80d6207ab65a7c5cfbb0065cb77e5'))\x0a\x09{\x0a\x09\x09switch ($_REQUEST['action'])\x0a\x09\x09\x09{\x0a\x09\x09\x09\x09case 'get_all_links'". The infection type is: Backdoor PHP/get_all_links."

    Do you know if this is really the backdoor malicious, or just because the theme is nulled and is not harmful?

    thanks
     
    Last edited: Apr 12, 2017
  2. SpoonFeeder

    SpoonFeeder Regular Member

    Joined:
    Mar 19, 2017
    Messages:
    397
    Likes Received:
    269
    Gender:
    Male
    Occupation:
    SpoonFeeding & Babysitting the Noobs
    Please post the download/thread link so I can see if it really has a backdoor on it!
     
  3. wpblog

    wpblog Registered Member

    Joined:
    Oct 19, 2010
    Messages:
    80
    Likes Received:
    23
    Home Page:
  4. BassTrackerBoats

    BassTrackerBoats Super Moderator Staff Member Moderator Jr. VIP

    Joined:
    Mar 10, 2010
    Messages:
    15,939
    Likes Received:
    29,267
    Occupation:
    Selling CPA Sites
    Location:
    Not England
    Home Page:
    Using as nulled theme is often flying too close to the sun... your wings may get burned and you may crash to the ground.

    It is cool to get free stuff but do not be Icarus.
     
    • Thanks Thanks x 3
  5. wpblog

    wpblog Registered Member

    Joined:
    Oct 19, 2010
    Messages:
    80
    Likes Received:
    23
    Home Page:
  6. SpoonFeeder

    SpoonFeeder Regular Member

    Joined:
    Mar 19, 2017
    Messages:
    397
    Likes Received:
    269
    Gender:
    Male
    Occupation:
    SpoonFeeding & Babysitting the Noobs
    @wpblog upload just the functions.php in zippy/dropbox and post the link here.
     
  7. BassTrackerBoats

    BassTrackerBoats Super Moderator Staff Member Moderator Jr. VIP

    Joined:
    Mar 10, 2010
    Messages:
    15,939
    Likes Received:
    29,267
    Occupation:
    Selling CPA Sites
    Location:
    Not England
    Home Page:
    Thread closed as the nulled theme is apparently infected.
     
Thread Status:
Not open for further replies.