[Resolved] suspect plugin files routinely noted in site scan

[Author]

Posts

[jimP]

I routinely get a msg from my server host re. suspect files as part of my Toolset plugins...see below. How may I resolve? Thanks, Jim P.

***

We're alerting you to the latest security scan of your website.

For each issue, we have included a filepath to the location of the suspect code, along with a brief description of the type of issue:

'/home/jimproct/public_html/wp-content/plugins/layouts/vendor/toolset/toolset-common/visual-editor/res/js/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/jimproct/public_html/wp-content/plugins/types/vendor/toolset/toolset-common/visual-editor/res/js/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/jimproct/public_html/wp-content/plugins/types/vendor/toolset/types/embedded/classes/path.php'
# Regular expression match = [symlink\s*\(]
'/home/jimproct/public_html/wp-content/plugins/types-access/vendor/toolset/toolset-common/visual-editor/res/js/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]
'/home/jimproct/public_html/wp-content/plugins/wp-views/vendor/toolset/toolset-common/visual-editor/res/js/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

Suspicious Files: We found 5 suspicious file(s). This may indicate a potential threat, such as questionable code, or code that may be hackable, such an outdated plugin or version of code.

Please remedy the issue(s) as soon as possible. If not fixed, we may need to suspend your website, as code exploits or viruses present a risk to our network and other customers. If you aren't sure how to fix the issue(s) or do not have a webmaster, please contact us and we can provide you a quote to resolve these issues for you.

[Shane]

Hi Jim,

Thank you for getting in touch.

I've escalated this to our 2nd tier supporters and currently waiting on a response from them.

Thanks,
Shane

[Shane]

Hi Jim,

Posting an update here as our team mentioned this as a false alarm.

The advise was that for you to inform your hosts that this is a false alarm, secondly would it be possible to put us in contact with your host or the team that is responsible for the security side of your site ?

This way our team can get in touch with them as well.

Thanks,
Shane

[jimP]

Okay, I"ve forwarded to the server host support team, and will get back in touch when I hear from them.

Jim P.

[Shane]

Thanks Jim

[jimP]

Just to let you know, I haven't heard back from them, so would appreciate if we keep this thread open for my updates.

Thanks,

Jim P.

[Shane]

Hi Jim,

The thread will remain open so long as there is a response at least once a week.

Thanks,
Shane