GregoryRasputin Posted October 14, 2017 Posted October 14, 2017 Today when viewing the daily emails from Config Exploit Scanner, i noticed something had been flagged as a Virus, when i looked i noticed this: Quote '/home/my/directory/forums/applications/core/data/javascript.xml' ClamAV detected virus = [Html.Exploit.CVE_2017_11793-6336854-1] Upon further looking i noticed that i had received the same email yesterday, here is what it shows: I grabbed the javascript.xml from a backup on the 5th and one from today, they are both the same size and have the exact same amount of lines, i googled the virus and found this:http://v.virscan.org/Html.Exploit.CVE_2017_11793-6336854-1.htmlhttp://r.virscan.org/report/bdb94c1f311d3e63aa0ff852e9548482https://webcache.googleusercontent.com/search?q=cache:eT6VpIyI1ZkJ:https://pastebin.com/jcigVFrT+&cd=3&hl=en&ct=clnk&gl=uk&client=firefox-b Just wondering if anyone else has experienced this, is this something i need to worry about or it is a false positive?
Rhett Posted October 14, 2017 Posted October 14, 2017 From what I have seen so far, this is a false positive from "clamav"
Thomas_B Posted October 17, 2017 Posted October 17, 2017 My Hosting Control Panel reports it as a virus too. I hope it's a false positive. I suggest that IPS contact ClamAV and get it white-listed or perhaps change the code to prevent the false report.
Bluto Posted October 17, 2017 Posted October 17, 2017 I think you'll be fine. ClamAV is the only one showing it as a virus. (false positive) https://www.virustotal.com/#/file/6c04a7009d8e363970c6bc19330f40cc33f29e9dfd461608f525698ffb562d5b/detection
Rhett Posted October 17, 2017 Posted October 17, 2017 I have reported this to ClamAV, you can do this same here if you are seeing this issue https://www.clamav.net/reports/fp
media Posted October 18, 2017 Posted October 18, 2017 Yep I just tried to upgrade and wen thru hell... after 5 days of technical support help finally we have found the problem that this file get deleted immediately after upload My host is saying that they cannot turn the ClamAv off, and here there is no solution What is the solution for this problem??????
Rhett Posted October 19, 2017 Posted October 19, 2017 On 10/17/2017 at 10:53 AM, Rhett said: I have reported this to ClamAV, you can do this same here if you are seeing this issue https://www.clamav.net/reports/fp ^^ 10 hours ago, media said: Yep I just tried to upgrade and wen thru hell... after 5 days of technical support help finally we have found the problem that this file get deleted immediately after upload My host is saying that they cannot turn the ClamAv off, and here there is no solution What is the solution for this problem??????
Recommended Posts
Archived
This topic is now archived and is closed to further replies.