GregoryRasputin Posted October 14, 2017 Share Posted October 14, 2017 Today when viewing the daily emails from Config Exploit Scanner, i noticed something had been flagged as a Virus, when i looked i noticed this: Quote '/home/my/directory/forums/applications/core/data/javascript.xml' ClamAV detected virus = [Html.Exploit.CVE_2017_11793-6336854-1] Upon further looking i noticed that i had received the same email yesterday, here is what it shows: I grabbed the javascript.xml from a backup on the 5th and one from today, they are both the same size and have the exact same amount of lines, i googled the virus and found this:http://v.virscan.org/Html.Exploit.CVE_2017_11793-6336854-1.htmlhttp://r.virscan.org/report/bdb94c1f311d3e63aa0ff852e9548482https://webcache.googleusercontent.com/search?q=cache:eT6VpIyI1ZkJ:https://pastebin.com/jcigVFrT+&cd=3&hl=en&ct=clnk&gl=uk&client=firefox-b Just wondering if anyone else has experienced this, is this something i need to worry about or it is a false positive? Link to comment Share on other sites More sharing options...
Rhett Posted October 14, 2017 Share Posted October 14, 2017 From what I have seen so far, this is a false positive from "clamav" Link to comment Share on other sites More sharing options...
Thomas_B Posted October 17, 2017 Share Posted October 17, 2017 My Hosting Control Panel reports it as a virus too. I hope it's a false positive. I suggest that IPS contact ClamAV and get it white-listed or perhaps change the code to prevent the false report. Link to comment Share on other sites More sharing options...
Bluto Posted October 17, 2017 Share Posted October 17, 2017 I think you'll be fine. ClamAV is the only one showing it as a virus. (false positive) https://www.virustotal.com/#/file/6c04a7009d8e363970c6bc19330f40cc33f29e9dfd461608f525698ffb562d5b/detection Link to comment Share on other sites More sharing options...
Rhett Posted October 17, 2017 Share Posted October 17, 2017 I have reported this to ClamAV, you can do this same here if you are seeing this issue https://www.clamav.net/reports/fp Link to comment Share on other sites More sharing options...
media Posted October 18, 2017 Share Posted October 18, 2017 Yep I just tried to upgrade and wen thru hell... after 5 days of technical support help finally we have found the problem that this file get deleted immediately after upload My host is saying that they cannot turn the ClamAv off, and here there is no solution What is the solution for this problem?????? Link to comment Share on other sites More sharing options...
Rhett Posted October 19, 2017 Share Posted October 19, 2017 On 10/17/2017 at 10:53 AM, Rhett said: I have reported this to ClamAV, you can do this same here if you are seeing this issue https://www.clamav.net/reports/fp ^^ 10 hours ago, media said: Yep I just tried to upgrade and wen thru hell... after 5 days of technical support help finally we have found the problem that this file get deleted immediately after upload My host is saying that they cannot turn the ClamAv off, and here there is no solution What is the solution for this problem?????? Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.