Reply To: Server showing gotmls file is a virus?

Home › Forums › Support Forum › Server showing gotmls file is a virus? › Reply To: Server showing gotmls file is a virus?

February 15, 2017 at 10:27 am #1781

Jerry Arsenault
Member

First up I love your plugin. So many headaches saved! Thanks for this!

Now the issue we found: We ran a server scan this morning to verify that our server was clear of Virus/malware.

Our server scan came back with the following.

=======/home/REDACTED/public_html/wp-content/plugins/gotmls/images/index.php: YARA.WebShell_Generic_PHP_5.UNOFFICIAL FOUND/home/REDACTED/public_html/wp-content/plugins/gotmls/images/index.php: YARA.WebShell_Generic_PHP_5.UNOFFICIAL FOUND/home/REDACTED/public_html/wp-content/plugins/gotmls/images/index.php: YARA.WebShell_Generic_PHP_5.UNOFFICIAL FOUND/home/REDACTED/public_html/wp-content/plugins/gotmls/images/index.php: YARA.WebShell_Generic_PHP_5.UNOFFICIAL FOUND———– SCAN SUMMARY ———–Known viruses: 5829644Engine version: 0.99.2Scanned directories: 31118Scanned files: 281585Infected files: 4Data scanned: 9016.72 MBData read: 32227.27 MB (ratio 0.28:1)Time: 1209.127 sec (20 m 9 s)=======

I looked through the PHP files but I didn’t see anything suspicious such as encoded or weird looking code.

I suspect it is a false positive but I reckoned I would just check in here to be certain.

Let me know if you would like me to send you a copy of the PHP file.