VIRUS found in Xmap 1.2.10

[franzb]

I downloaded today "Xmap 1.2.10 for Joomla 1.5" from http://joomla.vargas.co.cr/en/downloads/cat_view/1-xmap.

My Anti Virus Programm (Avira AntiVirus) found a Virus in
com_xmap-1.2.10.zip/front/cache/theme.php (filesize:13.227 Byte)

It seems that virus tries to use server for sending emails.

Please check this! Thanks in advance.

Edit: Also Xmap 1.2.9 is infected, 1.2.8 and 1.2.7 seems to be ok.

[guilleva]

Hi, thanks for letting us know that, we have disabled the download section while we investigate and correct this issue.

Thanks again,

Guillermo

[mibert]

Hi there,

I have downloaded XMAP 1..2.10 on 2nd Jan. 2011 and in my com_xmap-1.2.10.zip file there is no front/cache/theme.php file existing.

It seems that the virus has been added afterwards.

Best regards

Michael

[dpk]

Can you please describe the malware so it can be identified more easily? What dates was it in the download package? How did this happen?

[daviddaly5]

And what is the best course of action to take against malware?