• Resolved Sergio Alfaro

    (@rafasshop)


    Hi! I am a user of blogvault/airlift and it detected a malware related with a file of this plugin:

    Infected File (./wp-content/plugins/advanced-iframe/js/ai.min.js)

    maybe can include a code that can create that false positive?

    thanks

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author mdempfle

    (@mdempfle)

    Can you share more details? The strange this is: ai.min.js is only the minimized version of ai.js! So if there is something both files should be reported.
    Are you able to share this file with me and also which version you use exactly. Maybe the tool which generates the minimized file was hacked.

    Best regards,

    Michael

    Thread Starter Sergio Alfaro

    (@rafasshop)

    It’s a false positive. I received the reply from blogvault support:

    “It was a false positive because your plugin file was modified.”

    So all is clean ??

    Thank you.

    Plugin Author mdempfle

    (@mdempfle)

    ??

    I am now receiving the “malware detected” alert on malcare.com too on all of the 3 websites I have the latest version Version 2023.1 of the plugin installed:
    Infected File (./wp-content/plugins/advanced-iframe/js/ai.min.js)

    You can download the zipped file here:
    https://www.dropbox.com/s/1boqcl54ez2t8i3/ai.min.zip?dl=0

    Thread Starter Sergio Alfaro

    (@rafasshop)

    From blogvault, they explain me that was because their system detects that the file was modified, but it’s strange, I whitelisted the file, but each some days, again appears detected as malware again and again.

    Plugin Author mdempfle

    (@mdempfle)

    Hi, I know this issue. This seems to be a new detection. ai.min.js is generated automatically if you save the administration. The reason is that if someone wants to change some functionality the minimized file also has to be updated. In the next update I will change this. Then the file will only be updated if the size would really change.

    in the pro version this is already released. For the free version expect this next week to happen.

    Thread Starter Sergio Alfaro

    (@rafasshop)

    Hi! thank you for the fix!

    +1

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘malware or false positive?’ is closed to new replies.