Page 1 of 1

Quarantine a message that not exists

Posted: 09 Jun 2020, 13:18
by jdn1976
Hello, 2 days ago the CXS started to send me more than 9000 messages/day from this user. Almost every minute I got a new message.

cxswatch Scanning /home/deangelispedro/public_html/eventoscris/wp-includes/css/wp-config.php:

'/home/deangelispedro/public_html/eventoscris/wp-includes/css/wp-config.php'
(quarantined to /home/quarantine/cxsuser/deangelispedro/wp-config.php.1591704356_1) Known exploit = [Fingerprint Match] [PHP Exploit]


The odd is because the file wp-config.php is not there! Is this an issue of CXS?
I already try to stop and start service but do not solve the problem.

Any ideas?

Re: Quarantine a message that not exists

Posted: 09 Jun 2020, 17:47
by Sarah
Please see this forum post about that type of "false positive":

http://forum.configserver.com/viewtopic.php?p=13523