J 2.5.8, php 5.4, latest Akeeba, latest RS Firewall
After a system scan with RS Firewall I get this message:
administrator/components/com_admintools/akeeba/platform/jfscan/engines/archiver/jfscan.php PHP Shell - suspicious code /etc/passwd
RS Firewall advise to check it manually if it is a FP. Can you confirm a FP?