Joomla Templates Club 406,261 posts

[achiever Friend achieverJoin date: May 2010Posts: 3Downloads:0Uploads:0 Thanks: 2]

#151302

Hi

I’ve just signed up to the JATC and downloaded the Ores files from the JATC Club Templates forum.

The Template and Quickstart zip files both contained “desktop_.ini” which according to McAfee is infected with W32/Fujacks.remnants

Here are a list of the infected file locations

ja_oresquickstartjatc_ores_j15templatesja_oreshtmlcom_jacommentthemesja-ores-darkimagesDesktop_.ini
ja_oresquickstartjatc_ores_j15templatesja_oreshtmlcom_jacommentthemesja-ores-lightimagesDesktop_.ini
ja_orestemplateja_ores.v1.1.3htmlcom_jacommentthemesja-ores-darkimagesDesktop_.ini
ja_orestemplateja_ores.v1.1.3htmlcom_jacommentthemesja-ores-lightimagesDesktop_.ini

Is anyone else aware of this issue and is there a virus free download available?

[Saguaros Moderator SaguarosJoin date: September 2014Posts: 31405Downloads:237Uploads:471 Thanks: 845 Thanked: 5346 times in 4964 posts]

#344717

Dear achiever!

Thanks for reporting, right now i’ll check it

[Saguaros Moderator SaguarosJoin date: September 2014Posts: 31405Downloads:237Uploads:471 Thanks: 845 Thanked: 5346 times in 4964 posts]

#344722

Dear achiever!

I checked this issue in detail, they are not virus files. our developers had a mistaken when commited files to the download, they ‘ll clean up those files at the next version

Thanks a lot

[achiever Friend achieverJoin date: May 2010Posts: 3Downloads:0Uploads:0 Thanks: 2]

#344766

Hi Tienhc,

Thank you for investigating this.

I submitted the template zip to Virus Total and it confirmed the zip contained infected files.

Here is the analysis
http://www.virustotal.com/analisis/2ebec0f5779ef628e88e441d51342636e2da63e4b26fa88f8e74203f5debb681-1274860843

Perhaps the machine which hosts the source or the machine used to create the zip was infected at some point which is why the desktop_.ini files exist.

[Arvind Chauhan Moderator Arvind ChauhanJoin date: September 2014Posts: 3835Downloads:74Uploads:92 Thanks: 1240 Thanked: 1334 times in 848 posts]

#344780

HI achiever,

Thanks for the info, the package has been checked and the files in question removed. It has been updated in the download section. Please download again, or you can even delete the said files and use the earlier package for installation.

Regards

Arvind

1 user says Thank You to Arvind Chauhan for this useful post

1. achiever

[smitheringale Friend smitheringaleJoin date: December 2009Posts: 236Downloads:0Uploads:0 Thanks: 63 Thanked: 44 times in 18 posts]

#344954

<em>@drarvindc 180046 wrote:</em><blockquote>HI achiever,

Thanks for the info, the package has been checked and the files in question removed. It has been updated in the download section. Please download again, or you can even delete the said files and use the earlier package for installation.

Regards

Arvind</blockquote>

Hello,

I plan to use Ja Ores on 3-5 websites over the next couple of weeks. Can you let me know what I should do with regards ensuring the website is free from viruses, malware and any other problems?

I am running a 1 week old download on one site and a 1 month old download on another site.

Obviously, it will be a real pain to have to delete everything and start again, would you recommend I do this or is there an easier solution?

Cheers 🙂

[Phill Moderator PhillJoin date: February 2014Posts: 7013Downloads:40Uploads:77 Thanks: 917 Thanked: 2206 times in 1818 posts]

#344970

Just delete the files mentioned in the first post.

[Author]

Posts