linux-malware-detect icon indicating copy to clipboard operation
linux-malware-detect copied to clipboard

Published 20 hours ago • verified publisher icon rfxn

False positive detected with Firefox/Adblock plus

Open PhLinuX-Lab opened this issue 5 years ago • 0 comments

Hello, I'm creating the following issue in order to report a false positive I recently found on my own server:

FILE HIT: .cache/mozilla/firefox/gxknv56i.dev-edition-default/cache2/entries/552A48B4EE15F73D76E74D995DAB38422F5D2F09 which izs a gzip file created by firefox when it uses AdBlock plus 2.0 version 202001101613 (title : Liste FR )

MALDET MESSAGE SENT: HOST: myserver SCAN ID: 200111-0024.3546 STARTED: janv. 11 2020 00:24:47 +0100 COMPLETED: janv. 11 2020 00:26:15 +0100 ELAPSED: 88s [find: 0s]

PATH:
RANGE: 1 days TOTAL FILES: 1103 TOTAL HITS: 1 TOTAL CLEANED: 0

WARNING: Automatic quarantine is currently disabled, detected threats are still accessible to users! To enable, set quarantine_hits=1 and/or to quarantine hits from this scan run: /usr/local/sbin/maldet -q 200111-0024.3546

FILE HIT LIST: 552A48B4EE15F73D76E74D995DAB38422F5D2F09.gz

I have attached the suspicious file.

PhLinuX-Lab avatar Jan 12 '20 14:01 PhLinuX-Lab