Control Web Panel

Security => CSF Firewall => Topic started by: yeknafar on November 03, 2018, 10:50:30 AM

Title: Suspicious File Alert /tmp/config.tmp.phbUZD
Post by: yeknafar on November 03, 2018, 10:50:30 AM
Hello
I recive this Suspicious File Alert:

File:   /tmp/config.tmp.phbUZD
Reason: Script, file extension
Owner:  salamzab:salamzab (1003:1003)
Action: No action taken

What should I do?

Thanks
Title: Re: Suspicious File Alert /tmp/config.tmp.phbUZD
Post by: Jamshed Datori on November 03, 2018, 03:15:06 PM
It seems that your account is infected. Scan it and remove the malicious content.
Title: Re: Suspicious File Alert /tmp/config.tmp.phbUZD
Post by: Gogo on November 03, 2018, 09:51:09 PM
99,9% it is false positive.
I'm getting that annoying messages daily...for my own text documents.
(for me the same is on multiple servers, even on the new servers with clean cos and cwp installation)