Recent Topics
  1. b2evolution CMS Support Forums
  2. b2evolution Support
  3. General Support
  4. [CLOSED] Malicious Cache Files

[CLOSED] Malicious Cache Files

1 Sep 27, 2014 22:38    

My host keeps complaining and suspending my site because they claim

A routine scan of your account has found the following malicious or infected files present:

/htdocs/news/cache/c1/3f32aa77a16e4188457396297b3ede35.page: EIG.LinkSpam-11.UNOFFICIAL FOUND
/htdocs/news/cache/c1/a611bc406ad9855599e6d85bf14dd058.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/c3dbb3ea3e95c97800c4cb893e6440b9.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/a978734f9d967e4897e9ac865b0c63d4.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/120292634c30a8237ebc746e36e74f78.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/951ca8e4a41a60d69c186e08fd34bab0.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/f1d1a165bd53f96fc56e68d973f28ce3.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/873f557375d4a313d4b1a74596f893cf.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/e41483d91a25aec954746ff1f59f13e3.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/f9eb19ccc8bec6995c87596339c7e1c1.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/0c4113d4fb56c834d82c05c52efb225a.page: EIG.LinkSpam-9.UNOFFICIAL FOUND
/htdocs/news/cache/c1/705ef6393e4682f42d9029cc9642a557.page: EIG.LinkSpam-11.UNOFFICIAL FOUND

Etc, Etc

What is going on with the cache?

Back to top

2 Sep 29, 2014 07:01

Hello @bloggerboy,

The cache files are just plain HTML files generated to be served to the visitors without loading data from the database all the time. They are kept for a period of time and then just automatically regenerated. So, there should not be anything wrong wiht them, if they are legit of course.

Those messages look like your site contains LinkSpam, which is often related with BlackHat SEO. So, if there are not false positives and the cache files are generated by b2evo, and not just uploaed by an outsider (hacker?), then the problem is with the content of your site.

I tried to take a look of the sites that you link in your profile, but none of them are powered by b2evolution, so if you want, please send me the link in a private message to look around and see if there is something wrong at simple view. In the meantime, you should just disable the page cache as detailed here: http://b2evolution.net/man/collection-cache-settings (this action will delete all the cache/c[Blog]/[hash].page files).

Regards!

Back to top


Form is loading...