Php obfuscated: EasyBlog and SecurityCheck Pro
By Sarah Verlinde on Monday, 01 October 2018
Posted in Technical Issues
Replies 1
Likes 0
Views 643
Votes 0
Hello,
I just installed SecurityCheck Pro on my Joomla site, and EasyBlog came up with a possible chance for malware: "Pattern 29 - Php obfuscated. Found 135 occurence(s). Details: Encoded representation of source code, commonly used to hide malware"
File: /home/wnps9115/public_html/administrator/components/com_easyblog/includes/simplepie/library/SimplePie/Misc.php.

How can I verify if this is indeed malicious or normal?
Thank you,
Sarah
This is just a false positive report and it can be completely ignored. The SimplePie library uses a method to convert non unicode strings into unicode strings .

Generally, most of these scanners immediately thinks that these scripts are harmful whenever they see such codes. A proper scanner should keep a copy of known patterns in php libraries to avoid such false positive reports.
Mark
·
Monday, 01 October 2018 16:15
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post