[TYPO3-english] LTS 4.5.x and difference between the originally...

[Katja Lampela]

Thanks Alessandro. As Markus pointed out, this difference alert is a 
core file fault, nothing really different or alarming there.
The malware I found is Plesk originated, as you mentioned also.
Everything seems to be under control now.
I use (now, didn't have to before) Sucuri Security online service. Did 
the job :)
- Katja


9.7.2013 17.36, Alessandro Tuveri kirjoitti:
> However this happens to me:
>
>
> A difference between the originally installed version and the current
> one was detected!
>
> Modified files:
> layout/class.tx_cms_layout.php
> layout/res/typo3.pageModule.js
> tslib/class.tslib_content.php
> tslib/class.tslib_fe.php
> tslib/class.tslib_menu.php
> tslib/class.tslib_pagegen.php
> tslib/content/class.tslib_content_content.php
> tslib/content/class.tslib_content_records.php
> tslib/media/scripts/gmenu_layers.php
> tslib/media/scripts/tmenu_layers.php
> tslib/media/scripts/xmenu_layers.diff
>
> and this seems to be "normal".
> Version: v.4.5.27 LTS under centOS
>
> My clamav do not find anything about malware (what tool av are you using?)
>
>
> Quoting Katja Lampela <katja.lampela at lieska.net>:
>
>> Hi Georg,
>>
>> Sorry, I don't understand. I explain more: I uploaded new core tar.gz
>> (4.5.27) and unpacked it in the server and then pointed to that with
>> symlinks. Now these new core files seem to have differences according
>> to Extension Manager.
>>
>> Example, in EM I click system extension "TYPO3 CMS Frontend" and tab
>> "Developer Information", I get:
>>
>> A difference between the originally installed version and the current
>> one was detected!
>>
>> Modified files:
>> layout/class.tx_cms_layout.php
>> layout/res/typo3.pageModule.js
>> tslib/class.tslib_content.php
>> tslib/class.tslib_fe.php
>> tslib/class.tslib_menu.php
>> tslib/class.tslib_pagegen.php
>> tslib/content/class.tslib_content_content.php
>> tslib/content/class.tslib_content_records.php
>> tslib/media/scripts/gmenu_layers.php
>> tslib/media/scripts/tmenu_layers.php
>> tslib/media/scripts/xmenu_layers.diff
>>
>> If I point back to 4.5.22 I get no such difference alerts. Could it be
>> that the core files are somehow infected in such a small time..?
>>
>> - Katja
>>
>>
>> 9.7.2013 14.04, Georg Ringer kirjoitti:
>>> Hi,
>>>
>>> maybe it is just that first files have been transmitted unix and now
>>> windows?
>>>
>>> georg
>>>
>>
>> _______________________________________________
>> TYPO3-english mailing list
>> TYPO3-english at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english
>>
>
>
>
> ALESSANDRO TUVERI
>
> --------------------------------------
> AREA SERVIZI INFORMATICI E MULTIMEDIALI
> Servizi WEeb d'Ateneo
> Universit? degli Studi di Udine
> tel. ufficio 0432-558904
> --------------------------------------
> Homo sine pecunia est imago mortis
> --------------------------------------
>
> ----------------------------------------------------------------------
> SEMEL (SErvizio di Messaging ELettronico) - AINF, Universita' di Udine
>
>