search

marcocesarato / PHP-Antimalware-Scanner

AMWScan (PHP Antimalware Scanner) is a free tool to scan php files and analyze your project to find any malicious code inside it.
https://marcocesarato.github.io/PHP-Antimalware-Scanner/
GNU General Public License v3.0
618 stars 103 forks source link

detecting 15 infection in AWS SDK #29

Open rajeevkk32 opened 3 years ago

rajeevkk32 commented 3 years ago

HI, It is detecting 15 infections including TROJAN , ROOTKIT & BACKDOOR. Please help me in this. I am confused. composer require aws/aws-sdk-php https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/getting-started_installation.html

marcocesarato commented 3 years ago

Hi, this antimalware detects some unconventional code patterns often used on malware to obfuscate code or do malicious operations, but not all of these are real malware but they could be false positives, and this usally happen on complex library like aws sdk.

So the way is to download the library again or detect if it is real malware or not is to check the line of code found and figure out if it is doing something dangerous or is it just a "bad practice" or a code pattern "not conventional".

Usually using the --only-signatures flag should be more secure and detect fewer false positives.