| Question: |
Hello, faced a problem. In the directory /public_html/market/catalog/view/theme/default/template/moduleпериодически deleted the file kw_flycart.tplПроисходит it every 3-4 days, it`s not clear. Can you help? |
| Answer: |
Hello. in this file virus /home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl: {HEX}base64.inject.unclassed.6.UNOFFICIAL FOUND
/home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl: {HEX}base64.inject.unclassed.6.UNOFFICIAL FOUND
/home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl: {HEX}base64.inject.unclassed.6.UNOFFICIAL FOUND
/home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl: {HEX}base64.inject.unclassed.6.UNOFFICIAL FOUND
/home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl: {HEX}base64.inject.unclassed.6.UNOFFICIAL FOUND |
| Question: |
the error you see is to go on http://market.ehg.su/ |
| Answer: |
what`s in that file? antivirus detects it as malware. |
| Question: |
I did not find what line number? |
| Answer: |
the line number of what exactly? antivirus does not display the report rows |
| Question: |
Now compare the original file and my file from that directory. In this file, only the pattern of the basket |
| Answer: |
ok |
| Question: |
The files are identical, degree of similarity of 100% |
| Answer: |
where is this file? |
| Question: |
Engine opencart website, this module of the website https://opencartforum.com. The developers of the module for the first time faced with such a problem. |
| Answer: |
like if I can send this file to http://www.clamav.net/ description? what would it have added to the lists of exceptions download file here http://www.clamav.net/report/fp |
| Question: |
Now I loaded the original file into the directory you want to check? If so, contact the developers |
| Answer: |
Yes, the result is the same. # clamscan -ir /home/bogmark/public_html/market/catalog/view/theme/default/template/module
/home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl: {HEX}base64.inject.unclassed.6.UNOFFICIAL FOUND
----------- SCAN SUMMARY -----------
Known viruses: 4043398
Engine version: 0.98.7
Scanned directories: 2
Scanned files: 32
Infected files: 1
Data scanned: 0.19 MB
Data read: 0.15 MB (ratio 1.29:1)
Time: 10.225 sec (0 m 10 s) |
| Answer: |
# maldet -a /home/bogmark/public_html/market/catalog/view/theme/default/template/module
Linux Malware Detect v1.5
(C) 2002-2015, R-fx Networks <EMAIL>
(C) 2015, Ryan MacDonald <EMAIL>
This program may be freely redistributed under the terms of the GNU GPL v2
maldet(945394): {scan} signatures loaded: 10822 (8908 MD5 / 1914 HEX / 0 USER)
maldet(945394): {scan} building file list for /home/bogmark/public_html/market/catalog/view/theme/default/template/module, this might take awhile...
maldet(945394): {scan} nice setting scheduler priorities for all operations: cpunice 19 , ionice 6
maldet(945394): {scan} file list completed in 0s, found 262 files...
maldet(945394): {scan} found clamav binary at /usr/local/cpanel/3rdparty/bin/clamdscan, using the clamav scanner engine...
maldet(945394): {scan} scan of /home/bogmark/public_html/market/catalog/view/theme/default/template/module (262 files) in progress...
/usr/local/maldetect/internals/functions: line 1154: ed: command not found
maldet(945394): {scan} processing scan results for hits: 1 hits 0 cleaned
maldet(945394): {scan} scan completed on /home/bogmark/public_html/market/catalog/view/theme/default/template/module: files 262, malware hits 1, cleaned hits 0, time 8s
FILE HIT LIST:
{HEX}base64.inject.unclassed.6 : /home/bogmark/public_html/market/catalog/view/theme/default/template/module/kw_flycart.tpl |
| Question: |
The question is not quite on topic, but since there is writing - we have a primary domain ehg.su there lies a site that will be posted on the sub-domains with their own database. Is subdomain market.ehg.su that will be the main, that is ehg.su. I would like to make all sites were located in their directories, and now ehg.su posted in directory public_html. Is it possible to make this structure (the enumeration of folders) - ehg.su, nebosvod.su, parket-ideal.ru... etc.?PS Nice to have Lendo-site, so many fatties)and in order to send this message, I had in the console to delete the footer at 100px ;) |
| Answer: |
Yes, all domains except the main one you can place in the folder in which you prefer. the directory of the primary domain public_html/ additional domains and subdomains you can host anywhere predelah account |
| Question: |
Thank you for the clarification |
| Answer: |
do You have any more questions? |
| Question: |
Yet, I think topic can be closed |
| Answer: |
Since the issue has been resolved, we are closing this ticket. In case, in Your opinion, an unsatisfactory answer, You can always create a new one or reopen this ticket with my answer. |
| Question: |
\"56 antivirusnikov believe that the virus in the file no: reference virustotalХостеру should reconsider their security policy.In the list from virustotal is including ClamAV, which is referenced by the host. ClamAV as the rest of the 55 anti-virus, believes that there is no problem. You can apply in correspondence with the hosting company the link to virustotal, this is a fairly authoritative source for what to believe him.\" |
| Answer: |
we use CLAM antivirus. he believes that it is a virus. security policy is not relevant. because it depends entirely on antivirus. the file you need to give the developers the clam on the table that they would have added it in trusted. scanner, this function has no |
| Question: |
Clam antivirus did NOT believe that it is a virus. Check available on virustotal, according to the latest databases.Who to believe? They argue that ClamAV sees the virus. ClamAV claims that the virus is not.We can`t transfer the file, which does not have a virus and ask him to add in the exceptions - it is the lack of shows virus checking using ClamAV.The uploaded file is absolutely identical (which is expected), respectively, as well has no claim on the part of anti-virus software, including ClamAV.Even if to shut eyes to absence of the virus and follow the recommendations of the host, then the link is invalid. No on the website to file a False Positive Report. Link http://www.clamav.net/report/fp leads to a download page antivirus. Reference section Contact is the same, i.e. nowhere. |
| Answer: |
Expect amps., the question referred to the administrator. |
| Answer: |
how did you check the file with a clam? |
| Question: |
Removed from the file some piece of code that could cause false alarms of the antivirus check the file now, what will the anti-virus? |
| Answer: |
Hello we checked the folder /home/bogmark/public_html/market/catalog/view/theme/default/template/module/ antivirus now don`t see any problems |
| Question: |
Yeah, I noticed that in cpanel, the server information, in the scale memory usage fluctuates, the value 22гб bytes, bytes 16GB, 25GB bytes, the scale itself is red. What is the reason? |
| Question: |
To 22gb/ zero bytes * |
| Question: |
That is, it turns out that used 25GB of zero bytes, what is not clear about what memory is it |
| Answer: |
ask about what scale is it |
| Question: |
In statistics, the scale of \"memory Usage\". Now there slipped value 166гб of zero bytes |
| Answer: |
this informacia is of a General nature and to Your account directly not applicable |
| Question: |
It is some sort of problem occurring at the moment that may affect the work? Or just not pay attention? |
| Answer: |
no, this is not a problem. can not pay attention to it |
| Question: |
OK thanks |
| Answer: |
thank you for contacting the technical support |
