Cache File Flagged as Malware
-
Hey,
So my malware security (Malcare) has flagged files under device-data-cache as potential malware.
These files contain serialised data, but it does just look like a historical record. Are these IA files and so I can whitelist them, or should I be cleaning them as possible malware?
I’m assuming not malware given I’ve never had someone get in before, but better safe than sorry and all that.
Thanks,
FJ
-
Thanks for bringing this to our attention.
I can confirm that these are not hacked files, and this is a false-positive from Malcare.
I’ll explain the nature of the files so you understand their purpose. When someone visits the site, it can take up to a full second to recognize their device type via pattern matching. For that reason, we cache these patterns to quickly recognize future devices in just a few milliseconds. All of the files inside the /temp/ file are auto-generated and used for caching/performance purposes.
We will get in touch with Malcare and see if we can work with them to avoid this warning in the future.
If you can white-list the files in /temp/ that would be best. If they are deleted, they’ll get generated again and could cause a new warning from Malcare.
Thank you for that explanation. I will see if I can whitelist a folder – and glad to hear it’s a false positive and not a random security thing in IA.
Thanks!
[edit] I don’t think I can add whitelists as I’m on the lowest package with Malcare. And no, I literally cannot afford to upgrade. Hope your chat with Malcare goes well! 😄
[edit2] @newoceans I didn’t get Malcare to “clean” the file. I chose “not malware”. I don’t know if that’ll generate new false positives, but it may help their system to identify similar files from that plugin in future. Maybe.
The topic ‘Cache File Flagged as Malware’ is closed to new replies.
