Magento – Filename of class Varien_Data_Collection_Filesystem getting renamed to Filesystem.php.suspected

ce-1.9.1.1magento-1.9Securityserver

We're getting the following error:

Magento Fatal error: Class' Varien_Data_Collection_Filesystem' not found

Checking the cause of the error, the Filesystem.php file is is renamed to Filesystem.php.suspected. Manually renaming it back to Filesystem.php fixes the issue but everyday we need to manually rename it since it is constantly being renamed back to Filesystem.php.suspected.

I've googled as to what causes the error but still no luck. I am quite sure that there is something that is renaming this file but don't know where to start since i'm fairly new to magento.

Magento ver. 1.9.1.1

Best Answer

As @7ochem pointed out, this looks like something a malware scanner would do, that either you or your hoster installed.

Please compare the renamed file to the original Magento 1.9.1.1 file (you can download it from here: https://raw.githubusercontent.com/OpenMage/magento-mirror/1.9.1.1/lib/Varien/Data/Collection/Filesystem.php) and see if there are any differences.

If not, the alert was a false positive, configure the malware scanner to ignore it, or ask your hoster to do so.

If yes, you have been hacked. Please read https://magento.stackexchange.com/a/78866/243 and take action immediately.

Related Solutions

Magento Security – Recommended Method to Protect /downloader

Just put a .htaccess (or if nginx/whatever a config) into the downloader directory with Disallow from all in it to forbid any request on the directory.

If you wanted to allow a few IP addresses in (like your own), try something like this in your .htaccess

order deny,allow
deny from all
allow from 1.2.3.4 5.6.7.8

Where 1.2.3.4 and 5.6.7.8 are IP addresses you want to let through.

My prefered way: Just delete downloader

Magento 1.9.1.1 – AOE Scheduler Setup and Configuration

AOE Scheduler doesn't run jobs on its on. It is only a frontend to get a better overview what the magento cron job is doing.

When you click "Run now" the plugin is exactly doing this, run this task once, NOW.

In any other case, you have to run the magento cron.php/cron.sh to have your cron jobs run.

Best Answer

Related Solutions

Magento Security – Recommended Method to Protect /downloader

Magento 1.9.1.1 – AOE Scheduler Setup and Configuration

Related Topic