customize Plugin issues - Malware #7292
Comments
|
this is not malware, this is because the code is encrypted. but now I can see it is complaining about the Compiler.php. I will update the encryption to not encrypt this file so the antivirus software will stop to complain |
|
Thanks. This is what I thought also, but I could not get round it when I restored from quarantine. It kept crashing website.
Let me know when updated.
Thanks again.
…________________________________
From: Daniel Neto ***@***.***>
Sent: 18 October 2022 11:56 AM
To: WWBN/AVideo ***@***.***>
Cc: kollossus55 ***@***.***>; Author ***@***.***>
Subject: Re: [WWBN/AVideo] customize Plugin issues - Malware (Issue #7292)
this is not malware, this is because the code is encrypted.
but now I can see it is complaining about the Compiler.php.
I will update the encryption to not encrypt this file so the antivirus software will stop to complain
—
Reply to this email directly, view it on GitHub<#7292 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AM24UOIZ25LW4KQO4ZTASDLWDZ64BANCNFSM6AAAAAARH5HGDE>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
|
please download the plugin again and check. the main files are still encrypted, but the compiler.php is open |
Hi
|
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/183760337_colorsSave.json.php Original path /var/www/html/AVideo/plugin/Customize/page/colorsSave.json.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 Malware path: /var/lib/bitninja/quarantine/2022/10/19/1166218252_editorSave.php Original path /var/www/html/AVideo/plugin/Customize/page/editorSave.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 Malware path: /var/lib/bitninja/quarantine/2022/10/19/317389819_editor.php Original path /var/www/html/AVideo/plugin/Customize/page/editor.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 Malware path: /var/lib/bitninja/quarantine/2022/10/19/850455494_colors.php Original path /var/www/html/AVideo/plugin/Customize/page/colors.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 Malware path: /var/lib/bitninja/quarantine/2022/10/19/1885172266_colorsReset.json.php Original path /var/www/html/AVideo/plugin/Customize/page/colorsReset.json.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 Malware path: /var/lib/bitninja/quarantine/2022/10/19/924041107_ExtraConfig.php Original path /var/www/html/AVideo/plugin/Customize/Objects/ExtraConfig.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 Malware path: /var/lib/bitninja/quarantine/2022/10/19/432252057_Customize.php Original path /var/www/html/AVideo/plugin/Customize/Customize.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/183760337_colorsSave.json.php Original path /var/www/html/AVideo/plugin/Customize/page/colorsSave.json.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/1166218252_editorSave.php Original path /var/www/html/AVideo/plugin/Customize/page/editorSave.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/317389819_editor.php Original path /var/www/html/AVideo/plugin/Customize/page/editor.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/850455494_colors.php Original path /var/www/html/AVideo/plugin/Customize/page/colors.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/1885172266_colorsReset.json.php Original path /var/www/html/AVideo/plugin/Customize/page/colorsReset.json.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/924041107_ExtraConfig.php Original path /var/www/html/AVideo/plugin/Customize/Objects/ExtraConfig.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | Malware path: /var/lib/bitninja/quarantine/2022/10/19/432252057_Customize.php Original path /var/www/html/AVideo/plugin/Customize/Customize.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 |
|---|---|---|---|---|---|---|---|
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/183760337_colorsSave.json.php Original path /var/www/html/AVideo/plugin/Customize/page/colorsSave.json.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | |||||||
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/1166218252_editorSave.php Original path /var/www/html/AVideo/plugin/Customize/page/editorSave.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | |||||||
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/317389819_editor.php Original path /var/www/html/AVideo/plugin/Customize/page/editor.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | |||||||
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/850455494_colors.php Original path /var/www/html/AVideo/plugin/Customize/page/colors.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | |||||||
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/1885172266_colorsReset.json.php Original path /var/www/html/AVideo/plugin/Customize/page/colorsReset.json.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | |||||||
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/924041107_ExtraConfig.php Original path /var/www/html/AVideo/plugin/Customize/Objects/ExtraConfig.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 | |||||||
| Malware path: /var/lib/bitninja/quarantine/2022/10/19/432252057_Customize.php Original path /var/www/html/AVideo/plugin/Customize/Customize.php Malware name: {HEX}php.shell.black-id.695 Date: 2022-10-19 13:36:25 |
I restored from quarantine, but now I only have the website main header and nothing else. I checked the logfile and it didnt indicate any problems. see attached.
Please advise.
Thanks
|
I see now, sorry but I cannot unencrypt those files, you will need to trust the zip file and update all the files in it |
|
Do I reload them again ?
If its still a problem, what should I do, restore?
Regards
…________________________________
From: Daniel Neto ***@***.***>
Sent: 21 October 2022 12:15 PM
To: WWBN/AVideo ***@***.***>
Cc: kollossus55 ***@***.***>; Author ***@***.***>
Subject: Re: [WWBN/AVideo] customize Plugin issues - Malware (Issue #7292)
I see now,
sorry but I cannot encrypt those files, you will need to trust the zip file and update all the files in it
—
Reply to this email directly, view it on GitHub<#7292 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AM24UOJQ4ZJATV6HTCVGSE3WEJ3OJANCNFSM6AAAAAARH5HGDE>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
|
download the plugin again and make sure your antivirus does not quarantine the files. try to disable the antivirus and download and submit it to your site. after that feel free to enable the AV again |
|
Hi
No nothings changed..
Can you investigate?
regards
…________________________________
From: Daniel Neto ***@***.***>
Sent: 21 October 2022 12:21 PM
To: WWBN/AVideo ***@***.***>
Cc: kollossus55 ***@***.***>; Author ***@***.***>
Subject: Re: [WWBN/AVideo] customize Plugin issues - Malware (Issue #7292)
download the plugin again and make sure your antivirus does not quarantine the files.
try to disable the antivirus and download and submit it to your site.
after that feel free to enable the AV again
—
Reply to this email directly, view it on GitHub<#7292 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AM24UONDHYDVTI4UMHVQDHTWEJ4E3ANCNFSM6AAAAAARH5HGDE>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
|
if you update your streamer and upload the plugin with all the files (no file in quarentine) please share your log files now |
|
Do you mean do a git pull?
Will send Log flles over soon....
Get Outlook for Android<https://aka.ms/AAb9ysg>
…________________________________
From: Daniel Neto ***@***.***>
Sent: Friday, October 21, 2022 3:28:30 PM
To: WWBN/AVideo ***@***.***>
Cc: kollossus55 ***@***.***>; Author ***@***.***>
Subject: Re: [WWBN/AVideo] customize Plugin issues - Malware (Issue #7292)
if you update your streamer and upload the plugin with all the files (no file in quarentine)
please share your log files now
—
Reply to this email directly, view it on GitHub<#7292 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AM24UOJDT2QDVIJKRGL2DPTWEKSA5ANCNFSM6AAAAAARH5HGDE>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
hi
|
|
I am not sure why it is happening with you but try this update. make a git pull and try again |
|
Well thats baffling.. I did a git pull and watched it update an object file.. Will do some checks and see how it goes......weird!!!! Thanks for your help.. Im looking at clonming this site as I cannot afford to be offline like this.. What do you recommend ? |
Hi
My Bitninja Protection has found malware on the Customize plugin V1.4, which I recently bought. I have tried restoring it from quarantine, but it keeps crashing my website. I have kept it switched off now. Please advise.
BitNinja found 1 malware(s) on your server kollossus.com:
Regards
The text was updated successfully, but these errors were encountered: