Malware Warning

  • Resolved andyok

    (@andyok)


    2 years, 6 months ago

    My host’s malware scan is showing a warning:

    Exploit found: add.var.add.var.add.var

    In the following file:

    /wp-content/plugins/live-weather-station/includes/traits/DataIDHandling.php

    However, there is no difference between the installed plugin and a freshly downloaded copy.

    Has this come up for anyone else?

Viewing 7 replies - 1 through 7 (of 7 total)

  • Hello @andyok !
    Thanks for the hint. Probably a false positive but it’s worth checking out. Can you send me (in zip format) the original file that’s triggered the malware scan at the mail address specified here: https://perfops.one/.well-known/security.txt and tell me what’s the scanner name and all information you can have about it and the current detection?

    Thanks.

    • This reply was modified 2 years, 6 months ago by Pierre Lannoy.
    Thread Starter andyok

    (@andyok)

    Pierre,

    Thanks for the instant reply!

    Have emailed you as requested.

    Andy

    Thanks for the file.
    I can confirm it’s exactly the original distributed file from wp.org directory. So this file is not incriminated.
    If your malware scanner have a “restore” or “clean” feature, it may have already cleaned the file. If it’s the case (and if it’s not a false positive) the infection came from elsewhere. I think the best way to handle this case is to ask your hoster to check with the support.

    Thread Starter andyok

    (@andyok)

    Pierre,

    Thanks for reassuring us!

    I’ve let the host know and it looks like they’re going to whitelist the file so we don’t get a warning every day.

    Thanks again.

    Andy

    That’s good news ??
    I close this ticket, don’t hesitate to reopen it if needed.
    Thanks again for the heads up…

    Thread Starter andyok

    (@andyok)

    The hosts (20i) have just said they might contact you as part of the whitelisting process.

    They will probably just repeat all of the same things we have just discussed -sorry!

    Andy

    Ahaha!
    Ok, give them this discussion as reference to contact me ??

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Malware Warning’ is closed to new replies.