ATutor

Sucuri malware scan

• onside
  

  2015-01-17 12:03:36

  Sucuri malware scan

  Hi,
  We're using a website scanner to help keep malware and infection at bay. The scanner has found the following files suggesting they may be infected. However, it has also found the same files in an installation that we have not yet upgraded to, so I'm inclined to believe they are a false positive then. Could you confirm this? Files are as follows:
  
  ATutor/mods/_core/imscp/ims_import.php
  ATutor/mods/_core/themes/import.php
  ATutor/mods/_standard/tests/import_test.php
  ATutor/mods/_standard/tests/question_import.php
  
  Definition: php.backdoor.file_get_contents.005
  
  Many thanks
  Jim

• greg
  

  2015-01-17 12:49:21

  Re: Sucuri malware scan

  These would definately be false positives.
  
  The file_get_contents in these is for importing file content from various types of content or theme packages.
  
  You could confirm that the files have not been manipulated by comparing them with the originals either in GitHub or from a bundled release.

• onside
  

  2015-01-19 05:10:54

  Re: Sucuri malware scan

  Thought as much but thanks for the confirmation Greg
  Cheers
  Jim