mirror of
https://github.com/prasathmani/tinyfilemanager.git
synced 2026-04-26 10:55:56 +03:00
[GH-ISSUE #995] Malware Detected #643
Labels
No labels
Feature
Feature
Is It Really an Issue?
Need More Info
Request
Security
bug
duplicate
enhancement
enhancement
help wanted
invalid
pull-request
question
suggestion
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/tinyfilemanager#643
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @diatercinta on GitHub (Mar 22, 2023).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/995
when i upload the tinyfilemanager.php it's detected malware
@smalos commented on GitHub (Mar 22, 2023):
Duplicate of
https://github.com/prasathmani/tinyfilemanager/issues/759
https://github.com/prasathmani/tinyfilemanager/issues/581
?
@diatercinta commented on GitHub (Mar 22, 2023):
No I have try #759 and #581 but keep it like this

@smalos commented on GitHub (Mar 22, 2023):
Using cPanel?
https://support.cpanel.net/hc/en-us/articles/4967368771351-Editing-File-With-File-Manager-Fails-With-ERROR-BAILOUT-Malware-Detected-
@diatercinta commented on GitHub (Mar 22, 2023):
But

@smalos commented on GitHub (Mar 23, 2023):
Then ask your admin?
@stunzz commented on GitHub (Mar 23, 2023):
@diatercinta @smalos @prasathmani
Ok, it worked. I don't know how and why but it worked.
Earlier, immunify360 in cPanel was marking and rejecting the tinyfilemanager.php as a malware when uploaded.
What I have done is, I removed the line 6 in the .php file.
Line containing:-
Then saved and uploaded the file as usual. That's it.
@diatercinta commented on GitHub (Mar 23, 2023):
Thanks it's Solved
@divinity76 commented on GitHub (Apr 10, 2023):
basically, some actual malware installs tfm to allow the malware operators file access after infection. then antivirus heuristics thought tfm itself was malware (because it is installed by malware)
the correct course of action is probably to complain to the antivirus vendor: tfm is not malware, and your antivirus incorrectly flags it as such.
@nishantshah977 commented on GitHub (Sep 19, 2023):
Try Code obfuscation like base64_encode() and then base64_decode()
Read more here:
https://shahnishant.com.np/how-to-fix-bailout-malware-detected-issue/
@uploadkeeper commented on GitHub (May 1, 2024):
your website is not working, @nishantshah977