Input Revisium Antivirus for Websites

[revisium]

Hi everyone,

We're excited to announce a new security extension - Revisium Antivirus for Websites.
OK, what is it? Revisium Antivirus – Intelligent malware detection tool with one-click automatic malware cleanup.

Free version of the extension includes a fully-functional comprehensive file scanner for any Content Management System written in php (WordPress, Drupal, Joomla, MODx, Magento, etc) and for a static websites, of cause.
It detects any types of malware or injections in the files including backdoors, web-shells, viruses, hacker's tools, 'blackhat SEO' scripts, phishing pages and others. The scanning engine is based on the Revisium file scanner which has been developing since 2013 and combines a heuristic approach with precise regularly updated malware database.

Besides the perfect malware detection capability we'd like to highlight another important thing - the extension limits resource consumption and CPU load during scanning process so it will not affect overall server performance while scanning. Moreover an administrator can specify the amount of allocated resources for the scanning process and maximum number of threads.

What about Premium version of the extension? It enables some extra features:

• One-click automatic malware cleanup. No need to be a security expert to remove viruses and other types of malware from websites.
• Scheduled websites scanning. You can configure daily website check to monitor websites security.
• Admininstrator's notification on website infection. You will be notified right after the scheduled website scanning if malware is found.

BTW, nice thing about premium version - it is for unlimited domains (per-server license).

How to Install

Revisium Antivirus can be instantly installed right from the panel (check it under "Security" section) or via extension catalog: Revisium Antivirus for Websites - Plesk Extensions

Also we've prepared a knowledge base and FAQ for the extension customers: Customer Knowledge Base – Revisium Antivirus

This is a short video with demonstration of the interface:

---

Got a suspicion on website hack or viruses? Do not postpone to check it with Revisium Antivirus.

Looking forward to get your feedback, feature requests or bug reports on the extension under this thread or directly to plesk-support@revisium.com, that would help us making Revisium Antivirus a better website security tool.

Thanks!

 

[Brujo]

Revisium 1.5-16
Ubuntu 16.04.4 LTS‬
Plesk Onyx Version 17.5.3 Update #43

It seems when I start scan all, the /var/log/panel.log get filled up with this kind of entrys

[2018-03-06 19:04:34] ERR [extension/revisium-antivirus] TASK 12 task_object: Cannot find task for task_name=""
[2018-03-06 19:04:35] ERR [extension/revisium-antivirus] TASK 33 task_object: Cannot find task for task_name=""
[2018-03-06 19:06:34] ERR [extension/revisium-antivirus] TASK 73 task_object: Cannot find task for task_name=""
[2018-03-06 19:07:02] ERR [extension/revisium-antivirus] TASK 94 task_object: Cannot find task for task_name=""

in the overview the action status on a lot of domains is "Failed to scan". When I scan manually the failed Domains it works like a charm.

 

[revisium]

Revisium 1.5-16
Ubuntu 16.04.4 LTS‬
Plesk Onyx Version 17.5.3 Update #43

It seems when I start scan all, the /var/log/panel.log get filled up with this kind of entrys
in the overview the action status on a lot of domains is "Failed to scan". When I scan manually the failed Domains it works like a charm.

Thank you for the report. We're already looking into the issue. Get back to you once we get a clue. It looks most likely the issue with LongTask processing in the system.

 

[Brujo]

Thank you for the report. We're already looking into the issue. Get back to you once we get a clue. It looks most likely the issue with LongTask processing in the system.

Well I did another full scan test with ~100 Domains and this time with the "Quick Scan" mode enabled and it scaned it without failing. So it seems you are allready on the right track.

 

[revisium]

Well I did another full scan test with ~100 Domains and this time with the "Quick Scan" mode enabled and it scaned it without failing. So it seems you are allready on the right track.

Thank you for the tests and participation.

 

[revisium]

Today we have released a great update on the Revisium Antivirus (v1.7-1). It includes lots of improvements and enhancements in UI as well as introduces new feature:
- detection of public vulnerabilities in php scripts
- summary and details info on scanning results

Also the latest version includes:
- updated version of malware database with the latest website threats
- bugfix of "Failed to scan" issue when you have more that 30 websites to be scanned

If you have not yet installed it for some reason - now it's a good time to do this. Free version - is a fully-functional malware file scanner:
Revisium Antivirus for Websites - Plesk Extensions

Looking forward to get your feedback, feature requests or bug reports on the extension under this thread or directly to plesk-support@revisium.com, that would help us making Revisium Antivirus a better website security tool.

Thanks!

 

[revisium]

Hi everyone,
We have released a great update on Revisium Antivirus for Plesk!

Now you can monitor both files infection and domain blacklist status in major antivirus services and Google.
Also we've enhanced and improved UI/UX to show scanning details and see overall scanning progress as well as optimized antivirus speed. We also improved a customer support website Revisium Antivirus – Extension for Plesk Onyx Hosting Panel and add some new articles with recommendations on a better antivirus workflow.

A fully-functional malware scanner and domain blacklist status checker are available for free. No limitation to check hundreds of websites on your server. Go ahead and try it out Revisium Antivirus for Websites - Plesk Extensions.

Premium version enables one-click automatic malware clean-up, periodic website scanning and admin notifications on malware detection.
We'll be happy to hear some feedback, comments or feature requests from you guys under the thread or send it directly to the plesk-support@revisium.com.
Thanks!

 

[ChristophRo]

We use (paid version) of Revisium on a Debian9/Plesk17.8.11 server.

1) Is it normal that one task/script of your extension seems to start on enabling the extension and then run/hang forever?

root      31050  0.0  0.0   4076  1984 ?        Sl   08:47   0:00 plesk bin extension --exec revisium-antivirus ra_executor.php
psaadm    31056  0.0  0.0 295908 50196 ?        S    08:47   0:00  \_ /usr/bin/sw-engine -c /opt/psa/admin/conf/php.ini /usr/local/psa/bin/extension --exec revisium-antivirus ra_executor.php
psaadm    31276  0.0  0.0   4288   744 ?        S    08:47   0:00      \_ sh -c '/opt/psa/admin/bin/php' -dauto_prepend_file=sdk.php '/opt/psa/admin/plib/modules/revisium-antivirus/scripts/ra_executor.php' 2>&1
psaadm    31279  0.0  0.0 294268 49320 ?        S    08:47   0:03          \_ /usr/bin/sw-engine -c /opt/psa/admin/conf/php.ini -dauto_prepend_file=sdk.php /opt/psa/admin/plib/modules/revisium-antivirus/scripts/ra_executor.php

2) Why is there a cronjob (executing ra_executor_run.php) running every minute? Seems a bit excessive for what this extension has to accomplish?

 

[revisium]

...

Both things are normal.

1. ra_executor.php manages background queue of scanning process, so it's resident, but doesn't load the CPU at all and should be running all the time
2. it's kind of failover approach, if something goes wrong and ra_executor.php terminates, it will be automatically re-launched in a minute.

Once again, we check the approach and the extension regarding performance and server load, it doesn't affect either memory consumption or CPU load.

 

[ChristophRo]

Thanks for explanation.
Yeah, these processes do not use any significant resources.
As for the cronjob that runs every minute - the main/only problem I have with that, is that it clutters my syslog

 

[revisium]

The main/only problem I have with that, is that it clutters my syslog

As a solution to configure /etc/rsyslog.conf (uncomment "cron" line) to log crontab records in a separate /var/log/cron.log.

 

[ChristophRo]

thanks, that helps a bit

One other thing you might want to look into, though I'm not so sure how much you can optimize that:
When we open the Revisium Extension Page, we often get a HTTP 500 error message, due to exceeded memory_limit:

[25-Apr-2018 10:20:39 Europe/Berlin] PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 16384 bytes) in /opt/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php on line 228
[25-Apr-2018 10:20:39 Europe/Berlin] PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 20480 bytes) in /opt/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Select.php on line 930

Our server has many many sites, so I'm not completely surprised such a thing happens.
But I'm also a bit reluctant to increase the memory_limit of the php engine shipped within plesk....so maybe you can look into your script and optimize it somehow, so it uses a bit less memory

 

[revisium]

thanks, that helps a bit

One other thing you might want to look into, though I'm not so sure how much you can optimize that:
When we open the Revisium Extension Page, we often get a HTTP 500 error message, due to exceeded memory_limit:

Hello,
would you please send the details to the plesk-support@revisium.com:

- how many websites are on your server
- a piece of Plesk panel log with OOM message
- current memory_limit in php
- current version of php
- Plesk panel version
- OS version

We'll look into the issue and get back to you.
Thanks!

 

[ChristophRo]

Ok, just sent you an email

 

[revisium]

Thanks! Just send you a reply.
According to the log it look like PDO object cannot obtain the amount of data for about 2000 domains on a server with available 256Mb memory in php. We'll check it with our SW developers what could be optimized there.

 

[ChristophRo]

For now I've increased the memory_limit to 384MB via /etc/sw-engine/conf.d/custom.ini and this seems to be enough to prevent OOM's in our case.

 

[revisium]

OK, great to hear. We did some research regarding the "out of memory" issue and found some flaw in Plesk API while getting domains info. Already reported to Plesk and now looking forward to their analysis. Thank you for participation, logs and screenshots, they helped much.

 

[Chris Wokes]

Hi everyone,

We're excited to announce a new security extension - Revisium Antivirus for Websites.
OK, what is it? Revisium Antivirus – Intelligent malware detection tool with one-click automatic malware cleanup.

Free version of the extension includes a fully-functional comprehensive file scanner for any Content Management System written in php (WordPress, Drupal, Joomla, MODx, Magento, etc) and for a static websites, of cause.
It detects any types of malware or injections in the files including backdoors, web-shells, viruses, hacker's tools, 'blackhat SEO' scripts, phishing pages and others. The scanning engine is based on the Revisium file scanner which has been developing since 2013 and combines a heuristic approach with precise regularly updated malware database.

Besides the perfect malware detection capability we'd like to highlight another important thing - the extension limits resource consumption and CPU load during scanning process so it will not affect overall server performance while scanning. Moreover an administrator can specify the amount of allocated resources for the scanning process and maximum number of threads.

What about Premium version of the extension? It enables some extra features:

• One-click automatic malware cleanup. No need to be a security expert to remove viruses and other types of malware from websites.
• Scheduled websites scanning. You can configure daily website check to monitor websites security.
• Admininstrator's notification on website infection. You will be notified right after the scheduled website scanning if malware is found.

BTW, nice thing about premium version - it is for unlimited domains (per-server license).

How to Install

Revisium Antivirus can be instantly installed right from the panel (check it under "Security" section) or via extension catalog: Revisium Antivirus for Websites - Plesk Extensions

Also we've prepared a knowledge base and FAQ for the extension customers: Customer Knowledge Base – Best Antivirus

This is a short video with demonstration of the interface:

---

Got a suspicion on website hack or viruses? Do not postpone to check it with Revisium Antivirus.

Looking forward to get your feedback, feature requests or bug reports on the extension under this thread or directly to plesk-support@revisium.com, that would help us making Revisium Antivirus a better website security tool.

Thanks!

Thanks for sharing detailed guide and useful resources