We are having an issue with WordPress site on Godaddy Linux Shared hosting. Site is getting affected with Malware detected tool after installing the same in Godaddy.

We already took below steps to secure wordpress site and confirm that issue is getting started after moving site back to Godaddy.

  1. Initially launched Wordpress site on Godaddy shared Hosting.
  2. After few days, site gots penalized by Google Malware detection tool.
  3. We followed all security guideline to harden the wordpress security from code stand point of view.
  4. Then move site to AWS hosting for 3 weeks and kept monitoring issue. Then requested Google To remove us from malware black list & They confirmed that no malware was found and remove us from black list. For this 3 weeks, site worked perfectly fine.
  5. But due to AWS' Hosting cost concern, we move back to same Godaddy Shared hosting and after hosting again on same plan, site gets started affecting again with malware by some third party antivirus scanning tool(Quickheal, Macfee, online scanning site, etc.) - not by google so far.
  6. After contacting Godaddy Support they were unable to provide any solution for shared hosting. But requested us to buy their paid service call "SiteLock" for malware removal. It seems this tool is reporting some detection every day and resolving issue. But, i feel this is not permanent solution.

Hence, can anyone please suggest solution/option to resolve this case permanently?

  • You need to check your entire wordpress site. I believe it might cause by the plugin that you installed. Please make sure you install recommended plugin to avoid this problem. – Douglas Thomas Dec 15 '16 at 8:02
  • Can you tell what themes you use and what plugins? Do you use any plugins not from the repo, where repo is WordPress repo? – prosti Dec 24 '16 at 12:37

There are two scenarios here.

The first one is that detection is false positive, caused by things such as server IP history and/or current bad neighbours on server. You can't really do anything about this, either leave or wait it out and hope it goes away with time.

The second one is that your site is insecure and gets repeatedly infected. You need to fix it. If you don't know how you need to find/hire someone who does.

Given that host's tool does report infections repeatedly it is likely to be a second case.

  • First case might be valid. Regarding second case, it’s hard to believe due to below cases: 1. We followed all security guideline to harden it. its also have iTheme plugin to protect it. This proves there should not be any wrong with code. Thought? Opposite case is Godaddy's SiteLock Protection has reported detection on 9,Dec. It's been three days now - no detection has found yet. But, other antivirus / malware detection softwares like Quickheal, Mcafee, etc. are throwing alert on user's machines showing message like "harmful website..”. 2. Same code was working fine on AWS. – Manish Dec 12 '16 at 6:56
  • i.e. It's only getting affected with (Godaddy's) current Shared hosting - not when site was on AWS. – Manish Dec 12 '16 at 8:23
  • If your site is getting recurrently infected by malware (which you need to figure out for certain) then it’s obviously not secure. – Rarst Dec 12 '16 at 12:00

How big is the site? Or is it a huge multi-site? Kind of hard to imagine Amazon being more expensive than GoDaddy, especially with their free tier. I suggest going back to it if it fixed solved your problem, I've always felt as if GoDaddy creates problems for more revenue honestly.

In terms of costs of AWS you can see if you can get into or find a partner of their AWS Activate program https://aws.amazon.com/activate/

  • Thanks for your feedback. The site is not big one - but it's getting more traffic and I believe AWS free tier may not work for heavy traffic site. so we opteed for paid instance to handle heavy traffic We'll review this AWS activate program, too. – Manish Dec 22 '16 at 9:25

Your Answer

 
discard

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.