Skip to main content
Help Center
The GoDaddy Community will undergo maintenance starting on Tuesday, August 3rd at 3pm PST / 6pm EST. Learn more
Showing results for 
Show  only  | Search instead for 
Did you mean: 

False Positives from GoDaddy Scan?

I just received a notification email from GoDaddy this morning saying my site has been flagged for possible malware. I've ran several online scans and all came back clean. I also have GoDaddy security monitoring which scans my site daily and no problems. So what's the deal? Is this a false positive scan?


I've also checked some of the php wordpress files and nothing seems out of the ordinary. Critical files like .htaccess, index.php, functions.php, wp-config.php, etc. I compared them with back ups of the same files.


These are the flagged files.


rex.multi_vars.004 - html/.errordocs/_new.php

htaccess.spam-seo.redirect.006 - html/.htaccess

rex.multi_vars.004 - html/dummy/31988540_backup.php

rex.multi_vars.004 - html/dummy/wp-admin/install_backup.php

rex.multi_vars.004 - html/ejxngnkj.php

php.spam-seo.doorway-gen.043 - html/erased-locative.php

rex.multi_vars.004 - html/test/wp-admin/install_indesit.php

rex.multi_vars.004 - html/vrfigwfv.php

rex.multi_vars.004 - html/wp-content/index_prevv1.php

rex.multi_vars.004 - html/wp-content/uploads/2012/7f5c439d_prevv1.php

rex.multi_vars.004 - html/wp-content/uploads/2014/e3b533f0_new.php

rex.multi_vars.004 - html/wp-content/uploads/2016/97b519e4_indesit.php

rex.multi_vars.004 - html/wp-content/uploads/couponscored-150x150_indesit.php

rex.multi_vars.004 - html/wp-includes/certificates/ca-bundle_infoold.php

rex.multi_vars.004 - html/wp-includes/ID3/

rex.multi_vars.004 - html/wp-includes/images/icon-pointer-flag_noversion.php

rex.multi_vars.004 - html/wp-includes/images/smilies/mrgreen_new.php

rex.multi_vars.004 - html/wp-includes/images/wpicons_old.php

rex.multi_vars.004 - html/wp-includes/SimplePie/Cache/Memcache_new.php

rex.multi_vars.004 - html/wp-includes/SimplePie/XML/2d2ab86b_indesit.php

rex.multi_vars.004 - html/wp-includes/Text/Diff/Renderer_indesit.php

rex.multi_vars.004 - html/wp-includes/Text/Diff/Renderer_noversion.php

rex.multi_vars.004 - html/wp-includes/Text/Diff_bck_old.php

GoDaddy Security Monitor (Daily)


FireShot Capture 20 - GoDaddy Security - Monitoring Overvie_ - https___monitor204.sucuri.net_m_site_.png


Hi @jagman84, thanks for posting.

For some of the reports the detected malware is automatically removed. You can always contact Support for more details on the matter.


Gary - GoDaddy | Community Moderator
24/7 Support | Check System Status