Support

Akeeba Backup for Joomla!

#19616 Maldet detection

Posted in ‘Akeeba Backup for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Akeeba Backup version
n/a

Latest post by jparker3119 on Wednesday, 19 March 2014 14:21 CDT

jparker3119
I don't believe I have a problem but wanted to let you be aware of an issue that I ran across this pass week.
I got a MALDET alert from my server for the files for the files you can see in the alert.
I believe that they are all mistaken alerts as I compared a couple of them with the files of the same version that I downloaded from akeebabackup and unzipped. I found no visual difference. However, when I compared the files using winmerge, a difference was indicated in the commented-out header. Again no visual difference was apparent.
I uploaded the unzipped files to replace that MALDET had quarantined. No subsequent alert was generated.
Also I had no problems with other domains on the same server using the same software versions.
I don't believe that any problem exists but just wanted to inform you of this in case some action was required.
Thanks,
Jim

malware detect scan report for host.az-soho.net:
SCAN ID: 031714-0409.3814
TIME: Mar 17 04:47:08 -0700
PATH: /home*/*/public_html
RANGE: 2 days
TOTAL FILES: 6202
TOTAL HITS: 4
TOTAL CLEANED: 0

FILE HIT LIST:
{SA}stat.strlength : /home/aztour/public_html/components/com_jce/editor/tiny_mce/tiny_mce.js => /usr/local/maldetect/quarantine/tiny_mce.js.20113
{SA}stat.strlength : /home/aztour/public_html/media/akeeba_strapper/css/bootstrap.min.css => /usr/local/maldetect/quarantine/bootstrap.min.css.30629
{SA}stat.strlength : /home/aztour/public_html/media/akeeba_strapper/css/bootstrap.j25.min.css => /usr/local/maldetect/quarantine/bootstrap.j25.min.css.20864
{SA}stat.strlength : /home/aztour/public_html/media/com_admintools/js/jquery.jqplot.min.js => /usr/local/maldetect/quarantine/jquery.jqplot.min.js.6680
===============================================
Linux Malware Detect v1.4.2 < [email protected] >

dlb
Jim,

We do have some "usual suspects" that are flagged by host's scanners, but those files are not in them. The files that normally get flagged are listed in this article: https://www.akeebabackup.com/home/news/1536-new-threat-hosts-delete-files-without-asking.html. Those are the only files that we've had trouble with lately.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

jparker3119
I whitelisted the files that were being marked.
So far they have not been detected as malware.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!