Archived topic
My antivirus suddenly started removing "gp-premium" files
5 replies · Started by sharcs on January 23, 2021
I've been using Generatepress for over a year now with no issues.
Today my antivirus suddenly started targeting seemingly random files and removing them. I've included a screenshot of one files.
Any idea what's going on?
I did a malwarebytes scan and it came clean.
Hi there,
Looks like it's a local host install so I'd think the chance of getting hack isn't very high.
You can just re-install the premium plugin.
The default files definitely don't have any viruses :)
I have exactly the same problem. Same warning from Bitdefender:
Wir haben diese gefährliche Seite zu Ihrem Schutz blockiert (= We have blocked this dangerous site for your protection):
https://woertersee.ch/wp-content/plugins/gp-premium/sections/functions/metaboxes/js/generate-sections-metabox.js?ver=1.12.3
Name der Bedrohung: Trojan.GenericKD.456136
Wir haben diese gefährliche Seite zu Ihrem Schutz blockiert:
https://woertersee.ch/wp-content/plugins/gp-premium/library/alpha-color-picker/wp-color-picker-alpha.min.js?ver=2.1.4
Name der Bedrohung: Trojan.GenericKD.45613
So it should be enough to delete these files and re-install the original files, right?
Update: I'm very sorry to inform you that YOUR site seems to be infected:
Wir haben diese gefährliche Seite zu Ihrem Schutz blockiert:
https://generatepress.com/index.php?eddfile=1094051%3A25441%3A1%3A0&ttl=1611546485&file=1&token=1199150062dfe4aff35693223734e5761df74085e58b3dc9f0abba8e00c719c1
Name der Bedrohung: Trojan.GenericKD.45613899
:-(
Seems to be an issue with Bitdefender: https://generatepress.com/forums/topic/bitdefender-blocks-my-gp-sites-as-dangerous-infected-false-positives
We've reached out to them, but the more people that report this to them the faster they should be able to fix it.
Glad to hear they were false positives.
I'll remove Bitdefender and uninstall/reinstall the GP Premium plugin.
