• mike58

    (@mike58)


    today I got a message that the plugin has found virus. I have a couple of red markings which has a variation of this message:

    <?php include (TEMPLATEPATH . ‘/paginate.php’); ?>

    but this is no malware code – or is it..???

    any comment on this is appreciated…

    mike

    http://wordpress.org/extend/plugins/antivirus/

Viewing 5 replies - 1 through 5 (of 5 total)
  • Samuel B

    (@samboll)

    that is just a false positive – no worries

    Thread Starter mike58

    (@mike58)

    thanks a lot samboll!!!;)

    (think I posted slightly in wrong thread….)

    I use the antivirus for wordpress. they don´t have support and just a few threads here…

    thanks again!

    mike

    Meini

    (@meini)

    that is just a false positive – no worries

    @samboll, could you please explain why that is a false positive? How do we know paginate.php is clean?

    Thanks

    Clayton James

    (@claytonjames)

    It think it might be possible that the antivirus plugin has keyed in on the “include” phrase rather than paginate.php itself.

    Meini

    (@meini)

    Well, here is the answer to my own question: If AntiVirus also reports that the file paginate.php itself is clean, then including that file with the php ‘include’ statement must be ok and can only be a false positive. Obviously an include statement could be the product of a virus as it would be a convenient way of injecting malicious code, without changing the original file much. Correct me if I am wrong…

    Having said that, here is a suggestion for improvement to the author: Scan the files twice before returning any results to the user. That way you can eliminate the false positives produced by the include statement, because after the first scan you know if the included file is clean. But I am not an AntiVirus expert. This is all based on observations and assumptions…. 🙂

    Cheers

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘[Plugin: AntiVirus] is this virus or not?’ is closed to new replies.