Support

September 14, 2014 at 1:20 am

Hi there,
A couple days ago we were alerted by customers that our site was “not safe”; after doing some digging I’ve found that Windows Defender says that Malware is detected when visiting our site (https://tiggys.ca). Apparently the “Trojan” JS/Iframe.DI is triggering the response. Avast Antivirus doesn’t seem to be triggered when browsing the site online.

I’ve scanned the site with multiple malware detectors, and all say the site is clean. I’ve also searched through the most common places a backdoor or malicious file would be hidden (ie htaccess, wp-config, index.php, plugins, themes and uploads folders), and have found nothing. However, when scanning individual files (with both Windows Defender and Avast) a number of files in the Event Espresso plugins folders are flagged as malware (specifically in the espresso-calendar>scripts folder). I’ve looked through the code and can’t find anything obvious, so can only assume the programs are returning a false positive?

I wanted to bring this to your attention as I’m not sure if anyone else has had this issue, and want to know if something can be done about it since those customers who use Windows Defender are going to be discouraged from visiting our site altogether, let alone paying for classes online.
Thanks