Security software reporting potential malware

This topic is: resolved

 

Thank you for contacting me. Please note that I live in the GMT+3 time zone - responses might be delayed by this.

Viewing 1 reply thread
  • Author
    Posts
    • #10397


      polfeck
      Participant

      I use cleantalk for security and it sent a report of potential malware. I just want to make you aware of this and check if the files are necessary.

       
      <h2>Malware Issues</h2>
      <table border=”1″ width=”80%” cellspacing=”0″ cellpadding=”3″>
      <tbody>
      <tr>
      <td width=”50%”>Time</td>
      <td><b>Apr 14 2024 15:02:03</b></td>
      </tr>
      <tr>
      <td>Hostname</td>
      <td><b>findai.jobs</b></td>
      </tr>
      <tr>
      <td>Plugin</td>
      <td><b>wordpress-security-2.131</b></td>
      </tr>
      <tr>
      <td>Scanned files</td>
      <td><b>13</b></td>
      </tr>
      <tr>
      <td>Result</td>
      <td><b>WARNING</b></td>
      </tr>
      </tbody>
      </table>
       

      <b>These files may not contain malicious code but they use very dangerous PHP functions and constructions! PHP developers don’t recommend to use such code. Besides, it looks very suspicious.</b>

       
      <h2>Suspicious Files: 18</h2>
      <table border=”1″ width=”90%” cellspacing=”0″ cellpadding=”5″>
      <tbody>
      <tr>
      <th width=”40%”>Path</th>
      <th width=”20%”>Modify time</th>
      <th>MD5 Hash</th>
      <th>Plugin</th>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />aiomatic-helpers.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>e2790ef8944b587c12c73baa57285c<wbr />87</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />aiomatic-scraper.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>9334fae23e81752ab76779fc021b71<wbr />dc</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/aiomatic-finetune.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>9f6dbf4429cc0e09814011eb91c651<wbr />bb</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/rake-php-plus/tests/<wbr />RakePlusTest.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>ed7daed7c2d05009b23203560baab2<wbr />fa</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/php-code-coverage/src/<wbr />StaticAnalysis/<wbr />CachingFileAnalyser.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>29b3cca0543058372d58636fbf6fe8<wbr />d6</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/Framework/<wbr />Assert.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>592b02f641dcba97af9700b4ba8008<wbr />1a</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/Framework/<wbr />MockObject/Matcher.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>5b32ee6556cf505e38b7e10c450a48<wbr />c3</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/Framework/<wbr />TestCase.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>d3c1d6ccfd6086a2e0913ee1b2be71<wbr />a9</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/Runner/<wbr />DefaultTestResultCache.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>9b04cc208beeed454ea365666379b2<wbr />2c</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/TextUI/<wbr />Command.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>ba50143ecaf72f89fd8764cb7a9a5a<wbr />7d</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/TextUI/<wbr />TestRunner.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>1acb19af231ab29097c358e2b742bb<wbr />d3</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />phpunit/phpunit/src/TextUI/<wbr />XmlConfiguration/Migration/<wbr />Migrations/<wbr />MoveWhitelistExcludesToCoverag<wbr />e.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>4fa8b70ec76d4257450bd80e1f5d4f<wbr />ce</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />sebastian/type/src/<wbr />ReflectionMapper.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>4b972e4ee9e86a26c32d1f55254094<wbr />0d</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />sebastian/type/src/type/<wbr />CallableType.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>55ef3d0753b1517f5025f7797937f7<wbr />bb</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />sebastian/type/src/type/<wbr />IntersectionType.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>cbda76b3f4758438bdb4497a3b89e8<wbr />7a</td>
      <td>-</td>
      </tr>
      <tr>
      <td>/wp-content/plugins/aiomatic-<wbr />automatic-ai-content-writer/<wbr />res/readability/vendor/<wbr />sebastian/type/src/type/<wbr />IterableType.php</td>
      <td>Apr 13 2024 14:00:06</td>
      <td>a75184e53f022433ad678ed5d4fa54<wbr />cf</td>
      <td>-</td>
      </tr>
      </tbody>
      </table>

    • #10399


      Szabi – CodeRevolution
      Keymaster
      Post count: 4193

      Hello,

      First of all, thank you for your purchase.

      Can you send me, please, more details about why does the security software report the plugin files as suspicious? You should see more details about the detection, a clear reason should be provided, please send them to me.

      However, as far as it seems from above, the reports are False Alarms, meaning that they are not real threats, only the security software thinks that they are threats.

      More details on this are appreciated.

      Regards, Szabi – CodeRevolution.

Viewing 1 reply thread

You must be logged in to reply to this topic.