G DATA WebProtection

Discussion in 'Installation/Configuration' started by Steffan, Feb 11, 2022.

  1. Steffan

    Steffan Member

    im getting clients that cant login to the controlpanel any more
    any idees why?

    URL: https://xxxxx/themes/default/assets/favicon/site.webmanifest Reason: G DATA WebProtection has blocked access to this website as it contains infected code.

    to me it looks nothing special
    themes/default/assets/favicon/site.webmanifest
    Code:
    {
        "name": "ISPConfig",
        "short_name": "ISPConfig",
        "icons": [
            {
                "src": "/themes/default/assets/favicon/android-chrome-192x192.png",
                "sizes": "192x192",
                "type": "image/png"
            },
            {
                "src": "/themes/default/assets/favicon/android-chrome-512x512.png",
                "sizes": "512x512",
                "type": "image/png"
            }
        ],
        "theme_color": "#cc151c",
        "background_color": "#cc151c"
    }
     
  2. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

  3. Steffan

    Steffan Member

    I also never heard of it.
    i just wonder why it gets triggert by that page
    So people that is using it dont get this alert
     
  4. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    You would have to look into that app more or contact them to find out specifically what triggers the false positive. Or I suppose just edit the file and find it by trial and error if you're really curious.
     
  5. Steffan

    Steffan Member

  6. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    This post is about a virus scanner on your client system which falsely identifies one of the theme files as malicious, using rkhunter or any other scanner on the server isn't going to help with that. Refer back to the suggestions above.
     

Share This Page