Title: malware detect Last modified: August 22, 2016 --- # malware detect * Resolved [PornoLala](https://wordpress.org/support/users/pornolala/) * (@pornolala) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/) * I got report that mailware was detect in your plugin * FILE HIT LIST: {HEX}php.cmdshell.unclassed.356 : /home/XXXXXX/public_html/wp- content/plugins/add-meta-tags/amt-admin-panel.php => /usr/local/maldetect/quarantine/ amt-admin-panel.php.21062 * Please check! * [https://wordpress.org/plugins/add-meta-tags/](https://wordpress.org/plugins/add-meta-tags/) Viewing 9 replies - 1 through 9 (of 9 total) * Plugin Author [George Notaras](https://wordpress.org/support/users/gnotaras/) * (@gnotaras) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794156) * There is no malware in the plugin. Check the source code before posting BS on a public forum! * If you didn’t make this up, this must be a false positive. * Thread Starter [PornoLala](https://wordpress.org/support/users/pornolala/) * (@pornolala) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794159) * I got this email from malware detect software which i have installed on my dedicated server. * malware detect scan report for XXXXXX: SCAN ID: 021615-0516.11072 TIME: Feb 16 05:18:28 -0500 PATH: /home*/*/public_html RANGE: 2 days TOTAL FILES: 625 TOTAL HITS: 2 TOTAL CLEANED: 0 * FILE HIT LIST: {HEX}php.cmdshell.unclassed.356 : /home/XXXXXX/public_html/wp- content/plugins/add-meta-tags/amt-admin-panel.php => /usr/local/maldetect/quarantine/ amt-admin-panel.php.21062 {HEX}php.cmdshell.unclassed.356 : /tmp/nginx_client/ 0000089274 => /usr/local/maldetect/quarantine/0000089274.7149 =============== ================================ Linux Malware Detect v1.4.2 < [proj@rfxn.com](https://wordpress.org/support/topic/malware-detect/proj@rfxn.com?output_format=md) > * Thread Starter [PornoLala](https://wordpress.org/support/users/pornolala/) * (@pornolala) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794162) * In meantime got answered from support which told me there is nothing suspicious in that file. * Sorry for disturbing. * Plugin Author [George Notaras](https://wordpress.org/support/users/gnotaras/) * (@gnotaras) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794167) * Hi, I cannot reproduce your results on a CentOS 7 server using stock ClamAV and manually installed maldet with default configurations. * ``` Linux Malware Detect v1.4.2 ClamAV 0.98.6/20067/Mon Feb 16 14:54:45 2015 ``` * ``` maldet --scan-all /var/www/wordpress/wp-content/plugins/add-meta-tags/ malware detect scan report for c7: SCAN ID: 021615-1604.2884 TIME: Feb 16 16:04:56 +0000 PATH: /var/www/wordpress/wp-content/plugins/add-meta-tags/ TOTAL FILES: 34 TOTAL HITS: 0 TOTAL CLEANED: 0 =============================================== Linux Malware Detect v1.4.2 < proj@rfxn.com > ``` * Please update clamav and maldet data. Is it possible to reproduce the report with the false positive? * George * Thread Starter [PornoLala](https://wordpress.org/support/users/pornolala/) * (@pornolala) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794168) * Great, going to update clamav and maldet. * Thanks * Plugin Author [George Notaras](https://wordpress.org/support/users/gnotaras/) * (@gnotaras) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794169) * Also here are some checksums of `amt-admin-panel.php` as 2.6.4: * ``` File: amt-admin-panel.php CRC-32: c207afbc MD4: a5c66d269f2a2c2105b4ce053dd20bc0 MD5: 084c7788636dbe6601b68ff5fe2195b6 SHA-1: 487dab043d11d42640c65a698d72c3891e4c3bfc ``` * Also, I highly recommend running a diff comparison of your current `amt-admin- panel.php` file and the one included in the official 2.6.4 distribution package. * Plugin Author [George Notaras](https://wordpress.org/support/users/gnotaras/) * (@gnotaras) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794277) * Also, please make sure you always download the plugin from official sources. I’m considering adding a signed file containing sha1 sums of all files in future versions, so as to be able to verify their integrity. * What is the status of this issue? Have you been able to reproduce the false positive report? * BTW, I’m sorry for my initial response to this report. Your username, the number of your posts on these forums and the fact that the source code is available to check for any sign of malware made me think this was a joke. * Thread Starter [PornoLala](https://wordpress.org/support/users/pornolala/) * (@pornolala) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794284) * Yes, i scan that folder manually and everything was okay without any malware. So i think first time it was false positive alarm and dont know how that happened. * Here is scan report: * malware detect scan report for XXXXXX: SCAN ID: 021915-0300.17284 TIME: Feb 19 03:00:35 -0500 PATH: /home/XXXXX/public_html/wp-content/plugins/add-meta-tags/ TOTAL FILES: 61 TOTAL HITS: 0 TOTAL CLEANED: 0 * =============================================== Linux Malware Detect v1.4.2 < [proj@rfxn.com](https://wordpress.org/support/topic/malware-detect/proj@rfxn.com?output_format=md) > * No worries, i know i have weird username 🙂 * Plugin Author [George Notaras](https://wordpress.org/support/users/gnotaras/) * (@gnotaras) * [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794294) * > No worries, i know i have weird username 🙂 * Haha, really glad you acknowledge! 🙂 Viewing 9 replies - 1 through 9 (of 9 total) The topic ‘malware detect’ is closed to new replies. * ![](https://s.w.org/plugins/geopattern-icon/add-meta-tags.svg) * [Add Meta Tags](https://wordpress.org/plugins/add-meta-tags/) * [Frequently Asked Questions](https://wordpress.org/plugins/add-meta-tags/#faq) * [Support Threads](https://wordpress.org/support/plugin/add-meta-tags/) * [Active Topics](https://wordpress.org/support/plugin/add-meta-tags/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/add-meta-tags/unresolved/) * [Reviews](https://wordpress.org/support/plugin/add-meta-tags/reviews/) * 9 replies * 2 participants * Last reply from: [George Notaras](https://wordpress.org/support/users/gnotaras/) * Last activity: [11 years, 3 months ago](https://wordpress.org/support/topic/malware-detect/#post-5794294) * Status: resolved