Clamav Virus Found in /var/www/22222


#1

Hello a recent clamav scan found threats in /var/www/22222. I have never ran into this and not sure of the best way to proceed. Suggestions on how to fix it and how to prevent if would be much appriciated. Thanks

System Info Ubuntu 14.04.5 LTS latest version of EE

Scan Results- /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Handler/Keyboard.js: Txt.Malware.Agent-1835887 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Handler/Box.js: Txt.Malware.Agent-1838194 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Handler/Hover.js: Txt.Malware.Agent-1835883 FOU ND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Handler/Path.js: Txt.Malware.Agent-1835885 FOUN D /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Handler/Click.js: Txt.Malware.Agent-1835904 FOU ND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Lang/br.js: Txt.Malware.Agent-1835905 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Control/GetFeature.js: Txt.Malware.Agent-183589 9 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Control/OverviewMap.js: Txt.Malware.Agent-18358 84 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Control/WMSGetFeatureInfo.js: Txt.Malware.Agent -1838195 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Protocol/SQL/Gears.js: Txt.Malware.Agent-183590 1 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Layer/ArcGIS93Rest.js: Txt.Malware.Agent-183589 4 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Layer/SphericalMercator.js: Txt.Malware.Agent-1 835893 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Layer/TileCache.js: Txt.Malware.Agent-1835896 F OUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Layer/Vector/RootContainer.js: Txt.Malware.Agen t-1835886 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/Atom.js: Txt.Malware.Agent-1835902 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/WMSCapabilities/v1_3_0.js: Txt.Malware.A gent-1835889 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/WMSCapabilities/v1_3.js: Txt.Malware.Age nt-1835903 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/SOSGetFeatureOfInterest.js: Txt.Malware. Agent-1835890 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/WKT.js: Txt.Malware.Agent-1835900 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/WMC.js: Txt.Malware.Agent-1835898 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Format/WMSCapabilities.js: Txt.Malware.Agent-18 35891 FOUND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Filter/Spatial.js: Txt.Malware.Agent-1835892 FO UND /var/www/22222/htdocs/db/pma/js/openlayers/src/openlayers/lib/OpenLayers/Symbolizer/Raster.js: Txt.Malware.Agent-1835888 FOUND /var/www/akaction.org/htdocs/wp-content/uploads/2015/10/Jenssen-et-al.-2015-Anthropogenic-flank-attack-on-polar-bears-Front.-Ecol.-Evol…pdf: Pdf.Exploit.CVE_2016_1091-2 FOUND

----------- SCAN SUMMARY ----------- Known viruses: 5144723 Engine version: 0.99.2 Scanned directories: 44917 Scanned files: 241847 Infected files: 24 Total errors: 16013 Data scanned: 20055.14 MB Data read: 38919.66 MB (ratio 0.52:1) Time: 2314.314 sec (38 m 34 s)


#2
  1. I don’t trust clamav; it turned from bad to worse https://portal.smartertools.com/community/a2086/i-think-i-figured-out-why-clamav-has-gone-to-hell____.aspx

  2. Someone submitted the whole openlayers framework as a virus, a false positive as it seems http://lists.clamav.net/pipermail/clamav-users/2016-November/003709.html


#3