Warnings about tampered files

dan_ce · January 15, 2021, 11:55am

Getting a warning that the above is tampered with, but I’ve done the below and the error just instantly reappears?

user@freepbx:~# fwconsole ma downloadinstall framework --force fwconsole chown fwconsole reload
No repos specified, using: [standard,extended] from last GUI settings

Downloading module 'framework'
Processing framework
Downloading...
 16123610/16123610 [============================] 100%
Finished downloading
Extracting...Done
Download completed in 221 seconds
ww2w22qw222qwsUpdating tables admin, ampusers, cronmanager, featurecodes, freepbx_log, freepbx_settings, globals, module_xml, modules, notifications, cron_jobs...Done
Determined Asterisk version to be: 16.6.1
installing files to /var/www/html..done
installing files to /var/lib/asterisk/bin..done
installing files to /var/lib/asterisk/agi-bin..done
Checking for upgrades..
No further upgrades necessary
framework file install done, removing packages from module
file/directory: /var/www/html/admin/modules/framework/amp_conf removed successfully
file/directory: /var/www/html/admin/modules/framework/upgrades removed successfully
file/directory: /var/www/html/admin/modules/framework/start_asterisk removed successfully
file/directory: /var/www/html/admin/modules/framework/install removed successfully
file/directory: /var/www/html/admin/modules/framework/installlib removed successfully
Compressing Framework CSS...Done
Setting Framework Version...Done
Running SQL cleanup...Done
Building Packaged Scripts...Done
Refreshing GPG Keys...Done
Generating CSS...Done
Module framework version 15.0.17.12 successfully installed
Downloading module 'fwconsole'
The following error(s) occured:
 - Retrieved Module XML Was Empty

dan_ce · January 16, 2021, 8:05pm

hmmm, now I have 64 altered files

Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Argument/RewindableGeneratorTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/ChildDefinitionTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/AnalyzeServiceReferencesPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/AutowirePassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/AutowireRequiredMethodsPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/CheckCircularReferencesPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/CheckDefinitionValidityPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/CheckExceptionOnInvalidReferenceBehaviorPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/DecoratorServicePassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ExtensionCompilerPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/InlineServiceDefinitionsPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/IntegrationTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/OptionalServiceClass.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/PassConfigTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/PriorityTaggedServiceTraitTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/RegisterServiceSubscribersPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ReplaceAliasByActualDefinitionPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveBindingsPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveClassPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveInstanceofConditionalsPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveInvalidReferencesPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveParameterPlaceHoldersPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolvePrivatesPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveReferencesToAliasesPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Compiler/ResolveTaggedIteratorArgumentPassTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/ContainerBuilderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/CrossCheckTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/DefinitionTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/EnvVarProcessorTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Extension/ExtensionTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/NamedArgumentsDummy.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/SimilarArgumentsDummy.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/TestServiceSubscriber.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/directory/import/import.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/directory/recurse/simple.ini altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/directory/recurse/simple.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/directory/simple.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/defaults_bindings.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/legacy_invalid_alias_definition.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/legacy_invalid_definition.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/nonvalid1.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services1.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services10.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services22.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services6.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services8.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services_deep_graph.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/services_dump_load.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/tag_name_empty_string.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Fixtures/yaml/tag_name_only.yml altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/LazyProxy/Instantiator/RealServiceInstantiatorTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/LazyProxy/PhpDumper/NullDumperTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/ClosureLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/DirectoryLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/FileLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/GlobFileLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/IniFileLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/LoaderResolverTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/PhpFileLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/XmlFileLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/Loader/YamlFileLoaderTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/ParameterTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/ReferenceTest.php altered"
Module: "FreePBX Framework", File: "/var/www/html/admin/libraries/Composer/vendor/symfony/dependency-injection/Tests/ServiceLocatorTest.php altered"

dan_ce · January 16, 2021, 8:08pm

Running ‘fwconsole validate’ returns:

I actually doubt I have been hacked, I think it’s far more likely this is some weird bug with having done a restore of FreePBX…

PitzKey · January 16, 2021, 8:26pm

You can’t run all these commands in one line without doing && between each command.

Run

fwconsole ma refreshsignatures
fwconsole chown
fwconsole reload

dan_ce · January 16, 2021, 10:25pm

thanks - running fwconsole ma refreshsignatures sorted the issue in the meantime.

system · June 3, 2021, 11:04pm

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.