Archived topic
I found Heur.CSS.Hidden.gen malware threat?
10 replies · Started by NeedForGaming on February 8, 2022
Recently I have scanned my website on an online malware scanner website and they show me "Heur.CSS.Hidden.gen" as a threat.
Here is the code: [[<style id='generate-style-inline-css'> body{background-color:#f7f8f9;color:#222222;}a{color:#1e73be;}a:hover, a:focus, a:active{color:#f1c40f;}.grid-container{max-width:1280px;}.wp-block-group__inner-container{max-width:1280px;margin-left:auto;margin-right:auto;}.site-header .header-image{width:320px;}.generate-back-to-top{font-size:20px;border-radius:3px;position:fixed;bottom:30px;right:30px;line-height:40px;width:40px;text-align:center;z-index:10;transition:opacity 300ms ease-in-out;}.navigation-search{position:absolute;left:-99999px;pointer-events:none;visibility:hidden;z-index:20;width:100%;top:0;transition:opacity 100ms ease-in-out;opacity:0;}.navigation-search.nav-search-active{left:0;right:0;pointer-events:auto;visibility:visible;opacity:1;}.navigation-search input[type="search"]{outline:0;border:0;vertical-align:bottom;line-height:1;opacity:0.9;width:100%;z-index:20;border-radius:0;-webkit-appearance:none;height:60px;}.navigation-search input::-ms-clear{display:none;width:0;height:0;}.navigati
I think this is the cause that I am not on google.
Hi there,
I think you will find that is a false positive - what online scanning tool did you use?
As a note - if your site contained malware then google search console would most commonly flag that under security:
https://developers.google.com/search/docs/advanced/security/malware
here is the link: https://quttera.com/detailed_report/needforgaming.com
and I don't want that code displayed in my post CSS code and you say google shows in the security threat but Bing shoes me that my 70 plus URLs with malware with this code.
Here is the post URL with malware affected: view-source:https://needforgaming.com/anime-fighters-simulator/
Hi there,
The code you shared is just plain CSS - nothing malicious going on there at all.
Have you tried any other scanners? If that one is flagging regular CSS like that as malicious, my guess is it's likely not functioning correctly.
Let me know :)
Yes, I used another scanner and they also show malsious code. Is there any way to remove or hide this CSS code.
Hi there,
As Tom mentioned, that code you shared is plain CSS. It doesn't do anything aside from styling your page. If you try to remove this, the site will look weird as there will be no styling.
This CSS is generated from the theme's customizer settings.
You can try moving it to an external file through Appearance > Customize > General and set the dynamic print method to External File and see if anything changes.
I have set it to an external file but still, the code is appearing.
Can you share a screenshot of the Bing search console malware report that identifies those lines as an issue ?
The problem has been solved Thanks Elvin
Hi
Some security scans flags css code as a thread if there is visibility: hidden as this can hidden a maliciuos thing....
No problem. :)
@Loginos, thanks for sharing. :D
