Smarty Forum Index Smarty
The discussions here are for Smarty, a template engine for the PHP programming language.

Smarty as virus

 
Post new topic   Reply to topic    Smarty Forum Index -> Bugs
View previous topic :: View next topic  
Author Message
Fortael
Smarty Rookie


Joined: 12 Nov 2014
Posts: 8

PostPosted: Wed May 04, 2016 11:28 am    Post subject: Smarty as virus Reply with quote

I'm use latest version. (3.1.21) There is little problem with my hosting.
Rolling Eyes
Code:
MALDET SCAN RESULT
------------------
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : {CAV}Php.Trojan.Uploader-2
--------------------
VIRUSDIE SCAN RESULT
--------------------
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_table.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_table.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_image.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_image.php : Eval.POST.4 : [+]


And that...What to do?
Back to top
View user's profile Send private message
elpmis
Smarty Elite


Joined: 07 Jun 2007
Posts: 321

PostPosted: Wed May 04, 2016 3:22 pm    Post subject: Reply with quote

Your host account was hacked, Smarty files are infected.

Too low information to say why. Maybe some wrong write permissions for vendor folder.

By the way - last / current Smarty version is 3.1.29
Back to top
View user's profile Send private message
Fortael
Smarty Rookie


Joined: 12 Nov 2014
Posts: 8

PostPosted: Thu May 05, 2016 3:14 am    Post subject: Reply with quote

Just today i'm used composer for update. I personally checked content of each "problem" file no one word about "eval". Its clearly. I turned again to support. They again told about viruses Rolling Eyes It looks like antivirus have a expired cache. And my local antivirus have this problem too.
Back to top
View user's profile Send private message
AnrDaemon
Administrator


Joined: 03 Dec 2012
Posts: 1518

PostPosted: Thu May 05, 2016 1:43 pm    Post subject: Reply with quote

Or more likely, your "antivirus" just don't see the actual virus.
Which is not surprising for AVG.
Download i.e. the DrWeb Live Disk, and scan your system in offline mode.
Back to top
View user's profile Send private message
Fortael
Smarty Rookie


Joined: 12 Nov 2014
Posts: 8

PostPosted: Thu May 05, 2016 2:03 pm    Post subject: Reply with quote

Much more important is what to do with hosting?
Back to top
View user's profile Send private message
AnrDaemon
Administrator


Joined: 03 Dec 2012
Posts: 1518

PostPosted: Thu May 05, 2016 2:46 pm    Post subject: Reply with quote

No. Important is to ensure your dev system is clean.
THEN you can start tracing your hosting issues.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Smarty Forum Index -> Bugs All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Protected by Anti-Spam ACP