Is this joomla extension contained virus? detected with virustotal: detect-debug-environment sets-process-name

[skyfranky]

HI

I downloaded the extension from official website, and virustotal.com shows something not normal. I want to know if this is safe to use this extension.

[toivo]

That extension appears to be a Release Candidate (RC) of the J2Store shopping cart.

Do you mean you downloaded it, starting from the download link of the JED entry?

Did you install the extension in a test environment?

Download some other Joomla extension and compare what VirusTotal displays about the files and processes.

[skyfranky]

yes, I downloaded it and installed on the live server's testing site folder.
I uploaded 2 other joomla extensions to virusTotal, and one has not such issue. another one (easyblog) has the same thing shown.

[toivo]

Sometimes server-based antivirus products can produce false positives, if their rules are too restrictive about URLs that Joomla generates. I am sure, if the paid EasyBlog had a security issue, it would appear in the list of Vulnerable Extensions. Of course, always be careful with Beta and Release Candidate versions, to be run in test environments.

Download and install the JED Checker and submit the installation package and see if it reports any anomalies. The JED team uses it to check every extension submitted to JED.

[leolam]

As Toivo mentioned: False positives. J2Store is safe as is Easyblog. We use both on multiple client sites

Leo