Security software reporting potential malware

This topic is: resolved

Thank you for contacting me. Please note that I live in the GMT+3 time zone - responses might be delayed by this.

This topic has 1 reply, 2 voices, and was last updated 7 months, 2 weeks ago by Szabi – CodeRevolution.

Viewing 1 reply thread

Author

Posts
- April 14, 2024 at 4:13 pm #10397
 
 polfeck
 Participant
 
 I use cleantalk for security and it sent a report of potential malware. I just want to make you aware of this and check if the files are necessary.
 
 <h2>Malware Issues</h2>
 <table border=”1″ width=”80%” cellspacing=”0″ cellpadding=”3″>
 <tbody>
 <tr>
 <td width=”50%”>Time</td>
 <td>Apr 14 2024 15:02:03</td>
 </tr>
 <tr>
 <td>Hostname</td>
 <td>findai.jobs</td>
 </tr>
 <tr>
 <td>Plugin</td>
 <td>wordpress-security-2.131</td>
 </tr>
 <tr>
 <td>Scanned files</td>
 <td>13</td>
 </tr>
 <tr>
 <td>Result</td>
 <td>WARNING</td>
 </tr>
 </tbody>
 </table>
 
 These files may not contain malicious code but they use very dangerous PHP functions and constructions! PHP developers don’t recommend to use such code. Besides, it looks very suspicious.
 
 <h2>Suspicious Files: 18</h2>
 <table border=”1″ width=”90%” cellspacing=”0″ cellpadding=”5″>
 <tbody>
 <tr>
 <th width=”40%”>Path</th>
 <th width=”20%”>Modify time</th>
 <th>MD5 Hash</th>
 <th>Plugin</th>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/aiomatic-helpers.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>e2790ef8944b587c12c73baa57285c87</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/aiomatic-scraper.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>9334fae23e81752ab76779fc021b71dc</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/aiomatic-finetune.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>9f6dbf4429cc0e09814011eb91c651bb</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/rake-php-plus/tests/RakePlusTest.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>ed7daed7c2d05009b23203560baab2fa</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/php-code-coverage/src/StaticAnalysis/CachingFileAnalyser.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>29b3cca0543058372d58636fbf6fe8d6</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/Framework/Assert.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>592b02f641dcba97af9700b4ba80081a</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/Framework/MockObject/Matcher.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>5b32ee6556cf505e38b7e10c450a48c3</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/Framework/TestCase.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>d3c1d6ccfd6086a2e0913ee1b2be71a9</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/Runner/DefaultTestResultCache.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>9b04cc208beeed454ea365666379b22c</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/TextUI/Command.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>ba50143ecaf72f89fd8764cb7a9a5a7d</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/TextUI/TestRunner.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>1acb19af231ab29097c358e2b742bbd3</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/phpunit/phpunit/src/TextUI/XmlConfiguration/Migration/Migrations/MoveWhitelistExcludesToCoverage.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>4fa8b70ec76d4257450bd80e1f5d4fce</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/sebastian/type/src/ReflectionMapper.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>4b972e4ee9e86a26c32d1f552540940d</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/sebastian/type/src/type/CallableType.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>55ef3d0753b1517f5025f7797937f7bb</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/sebastian/type/src/type/IntersectionType.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>cbda76b3f4758438bdb4497a3b89e87a</td>
 <td>-</td>
 </tr>
 <tr>
 <td>/wp-content/plugins/aiomatic-automatic-ai-content-writer/res/readability/vendor/sebastian/type/src/type/IterableType.php</td>
 <td>Apr 13 2024 14:00:06</td>
 <td>a75184e53f022433ad678ed5d4fa54cf</td>
 <td>-</td>
 </tr>
 </tbody>
 </table>
 
 Add New Note to this Reply
- April 14, 2024 at 4:27 pm #10399
 
 Szabi – CodeRevolution
 Keymaster
 
 Post count: 4578
 
 Hello,
 
 First of all, thank you for your purchase.
 
 Can you send me, please, more details about why does the security software report the plugin files as suspicious? You should see more details about the detection, a clear reason should be provided, please send them to me.
 
 However, as far as it seems from above, the reports are False Alarms, meaning that they are not real threats, only the security software thinks that they are threats.
 
 More details on this are appreciated.
 
 Regards, Szabi – CodeRevolution.
 
 Add New Note to this Reply
Author

Posts

Viewing 1 reply thread

The topic ‘Security software reporting potential malware’ is closed to new replies.