Smarty Forum Index Smarty
WARNING: All discussion is moving to https://reddit.com/r/smarty, please go there! This forum will be closing soon.

Smarty as virus

 
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Smarty Forum Index -> Bugs
View previous topic :: View next topic  
Author Message
Fortael
Smarty Rookie


Joined: 12 Nov 2014
Posts: 8

PostPosted: Wed May 04, 2016 11:28 am    Post subject: Smarty as virus Reply with quote

I'm use latest version. (3.1.21) There is little problem with my hosting.
Rolling Eyes
Code:
MALDET SCAN RESULT
------------------
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : {CAV}Php.Trojan.Uploader-2
--------------------
VIRUSDIE SCAN RESULT
--------------------
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_table.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_table.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_image.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_image.php : Eval.POST.4 : [+]


And that...What to do?
Back to top
View user's profile Send private message
elpmis
Smarty Elite


Joined: 07 Jun 2007
Posts: 321

PostPosted: Wed May 04, 2016 3:22 pm    Post subject: Reply with quote

Your host account was hacked, Smarty files are infected.

Too low information to say why. Maybe some wrong write permissions for vendor folder.

By the way - last / current Smarty version is 3.1.29
Back to top
View user's profile Send private message
Fortael
Smarty Rookie


Joined: 12 Nov 2014
Posts: 8

PostPosted: Thu May 05, 2016 3:14 am    Post subject: Reply with quote

Just today i'm used composer for update. I personally checked content of each "problem" file — no one word about "eval". Its clearly. I turned again to support. They again told about viruses Rolling Eyes It looks like antivirus have a expired cache. And my local antivirus have this problem too.
Back to top
View user's profile Send private message
AnrDaemon
Administrator


Joined: 03 Dec 2012
Posts: 1785

PostPosted: Thu May 05, 2016 1:43 pm    Post subject: Reply with quote

Or more likely, your "antivirus" just don't see the actual virus.
Which is not surprising for AVG.
Download i.e. the DrWeb Live Disk, and scan your system in offline mode.
Back to top
View user's profile Send private message
Fortael
Smarty Rookie


Joined: 12 Nov 2014
Posts: 8

PostPosted: Thu May 05, 2016 2:03 pm    Post subject: Reply with quote

Much more important is what to do with hosting?
Back to top
View user's profile Send private message
AnrDaemon
Administrator


Joined: 03 Dec 2012
Posts: 1785

PostPosted: Thu May 05, 2016 2:46 pm    Post subject: Reply with quote

No. Important is to ensure your dev system is clean.
THEN you can start tracing your hosting issues.
Back to top
View user's profile Send private message
Display posts from previous:   
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Smarty Forum Index -> Bugs All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Protected by Anti-Spam ACP