#1594 – Custom fields in module are blocked by antivirus

Hello, since last modifications that you made on my test site, the custom fields are blocked by my Kaspersky antivirus.

How to reproduce (on the test site):
- In module select "Offers tab"
- select some Taxi From and Taxi To with custom fields
- check Return check box

Custom fields are not loaded and you will see the alert message of Kaspersky antivirus:

05.11.2018 14.09.56 Une adresse Internet dangereuse a été bloquée. https://aramis-paris.com/test3/index.php?option=com_taxibooking&controller=onepage&task=getReturnExtraList Objet: https://aramis-paris.com/test3/index.php?option=com_taxibooking&controller=onepage&task=getReturnExtraList Raison: Analyse heuristique Application: Google Chrome Date et heure: 05/11/2018 14:09

Notice: custom fields work fine in Address tab.

Thank you!

Hi Serge,
this is some local issue that you are having. Kaspersky cannot block any content on your website server as it is installed locally on your computer. The message is telling you that the program that has been blocked is Google Chrome.
If Kaspersky thinks that for some reason your hosting server is infected with a virus and is blocking access to it then you should speak to your hosting provider.
We are often checking the package of Taxi Booking and you can do so by downloading it an running Kaspersky on the package archive.
If you get any kind of report of a threat when you scan the package pass along that message so we can debug, otherwise we can not reproduce your issue as we have no access to your local machine, your server and your Kaspersky installation at the same time.

Hope this helps.
Kind regards.

Hi, it happens also on Firefox, and on all my computers on which I have Kaspersky antivirus and only on my test3 site Offers tab (as for the booking form front end).

06.11.2018 12.02.05 Une adresse Internet dangereuse a été bloquée. https://aramis-paris.com/test3/index.php?option=com_taxibooking&controller=onepage&task=getReturnExtraList Objet: https://aramis-paris.com/test3/index.php?option=com_taxibooking&controller=onepage&task=getReturnExtraList Raison: Analyse heuristique Application: Firefox Date et heure: 06/11/2018 12:02

The message says that a dangerous internet link has been blocked. According to the heuristic analysis of Kaspersky antivirus.

I think it is linked with some part of the code of getReturnExtraList that is loaded on my local computer.
A lot of customers probably use also Kaspersky antivirus and if they experience same local problem on their machines it is not good.

As I told before it does not trigger this error on the Address tab, so may be you can compare the functions that are used for Address and for Offers tab, may be there is some slight difference between them, for instance use of http instead of https.

Thank you!

Hi,
I wrote to Kaspersky and awaiting the answer.

I noticed that antivirus blocs always those four files:
1. getAvailableCarsAjax
2. getReturnExtraListAjax
3. getExtraList
4. getExtraListAjax
Any ideas why their automatic heuristic analysis is blocking those files?

Hi Serge,

Those methods return data in JSON format, there should be nothing malicious there. Please talk with Kaspersky and let us know what they say. If we could debug the problem on our side, that would be easier for us to detect the problem, but we can't do that for now.

Thanks & Regards
Ronniee

Hi, I explained the problem to Kaspersky, they resolved the problem, it seems that it was a false alert.
Everything is working fine now on front end and at the back end.
Thank you!