![Smarty Forum Index Smarty Forum Index](templates/smarty/images/phpbb2_logo.gif) |
Smarty
WARNING: All discussion is moving to https://reddit.com/r/smarty, please go there! This forum will be closing soon. |
|
View previous topic :: View next topic |
Author |
Message |
Fortael Smarty Rookie
Joined: 12 Nov 2014 Posts: 8
|
Posted: Wed May 04, 2016 11:28 am Post subject: Smarty as virus |
|
|
I'm use latest version. (3.1.21) There is little problem with my hosting.
Code: | MALDET SCAN RESULT
------------------
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : {CAV}Php.Trojan.Uploader-2
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : {CAV}Php.Trojan.Uploader-2
--------------------
VIRUSDIE SCAN RESULT
--------------------
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_break.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_nocache_insert.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_select_date.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_cacheresource_file.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_rdelim.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/modifiercompiler.cat.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_table.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_table.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_debug.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_configfilelexer.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_function.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_function_call_handler.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/sysplugins/smarty_internal_compile_include.php : Eval.POST.4 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_image.php : Eval.POST.1 : [+]
/var/www/u9564561/data/www/domain/vendor/smarty/plugins/function.html_image.php : Eval.POST.4 : [+] |
And that...What to do?
![](http://puu.sh/oBUxU/99e70d341f.png) |
|
Back to top |
|
elpmis Smarty Elite
Joined: 07 Jun 2007 Posts: 321
|
Posted: Wed May 04, 2016 3:22 pm Post subject: |
|
|
Your host account was hacked, Smarty files are infected.
Too low information to say why. Maybe some wrong write permissions for vendor folder.
By the way - last / current Smarty version is 3.1.29 |
|
Back to top |
|
Fortael Smarty Rookie
Joined: 12 Nov 2014 Posts: 8
|
Posted: Thu May 05, 2016 3:14 am Post subject: |
|
|
Just today i'm used composer for update. I personally checked content of each "problem" file — no one word about "eval". Its clearly. I turned again to support. They again told about viruses It looks like antivirus have a expired cache. And my local antivirus have this problem too. |
|
Back to top |
|
AnrDaemon Administrator
Joined: 03 Dec 2012 Posts: 1785
|
Posted: Thu May 05, 2016 1:43 pm Post subject: |
|
|
Or more likely, your "antivirus" just don't see the actual virus.
Which is not surprising for AVG.
Download i.e. the DrWeb Live Disk, and scan your system in offline mode. |
|
Back to top |
|
Fortael Smarty Rookie
Joined: 12 Nov 2014 Posts: 8
|
Posted: Thu May 05, 2016 2:03 pm Post subject: |
|
|
Much more important is what to do with hosting? |
|
Back to top |
|
AnrDaemon Administrator
Joined: 03 Dec 2012 Posts: 1785
|
Posted: Thu May 05, 2016 2:46 pm Post subject: |
|
|
No. Important is to ensure your dev system is clean.
THEN you can start tracing your hosting issues. |
|
Back to top |
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|