Conversation
supportHi there, hope you’re well and staying safe! I’m using the AntiVirus plugin on my Voux theme and I keep getting alerts for the following theme files (I’ve included how many and the highlighted words or ‘various letters’ in brackets): /themes/thevoux-wp/inc/admin/imports/import.php (1: unserialize) /themes/thevoux-wp/inc/admin/option-tree/admin/includes/ot-functions-admin.php (6: unserialize + 2: file) /themes/thevoux-wp/inc/admin/option-tree/admin/includes/ot-meta-box-api.php (2: unserialize) /themes/thevoux-wp/inc/admin/option-tree/admin/includes/ot-settings-api.php (2: unserialize) /themes/thevoux-wp/inc/admin/option-tree/admin/ot-loader.php (2: unserialize) /themes/thevoux-wp/inc/framework/thb-lazyload.php (2: various letters) /themes/thevoux-wp/inc/framework/thb-social-links/social-links.php (2: same various letters + 1: various letters) /themes/thevoux-wp/inc/framework/thb-twitter-helper.php (1: various letters) /themes/thevoux-wp/inc/framework/visualcomposer/templates/thb-page.php (1: various letters) I’ve contacted the theme’s support, but if you’re able to shed some light on whether these are known faults and/or advise if I can safely dismiss them, then that would be much appreciated. Many thanks, TFC The page I need help with: [ log in to see the link]
Hi @vickytfc Antivirus is mostly checking for suspicious functions and just for a few actual malware codes. This means you will get a warning for every function that is usual used in malware. Every file function is marked as a warning for example. Unserialize is one of those functions checked: https://github.com/pluginkollektiv/antivirus/blob/e8f60b3844a353253ffb8d9b898beb8073d775fa/inc/class-antivirus-checkinternals.php#L157 You need to check if this is okay, or used in a bad way. Antivirus is just pointing at code that *could* be bad. Not necessarily that it *is* malware. If you trust your theme vendor, get a fresh copy from them and compare it to the files you have. If everything is identical you can dismiss all those warnings. All the best, Torsten
Too easy, many thanks for your help Torsten!
Hi @vickytfc Antivirus is mostly checking for suspicious functions and just for a few actual malware codes. This means you will get a warning for every function that is usual used in malware. Every file function is marked as a warning for example. Unserialize is one of those functions checked: https://github.com/pluginkollektiv/antivirus/blob/e8f60b3844a353253ffb8d9b898beb8073d775fa/inc/class-antivirus-checkinternals.php#L157 You need to check if this is okay, or used in a bad way. Antivirus is just pointing at code that *could* be bad. Not necessarily that it *is* malware. If you trust your theme vendor, get a fresh copy from them and compare it to the files you have. If everything is identical you can dismiss all those warnings. All the best, Torsten
Too easy, many thanks for your help Torsten!