Virus detected

Hi there
This is regarding Chronoforms V4 for joomla 2.5 (I'm still using in an installation on a localhost xampp customer).
​
Suddenly stopped to work with the message ACTION FILE IS MISSING.
​
Then I found this page
http://www.chronoengine.com/forums/posts/t87195/chronoforms-action-file-missing.html
​
​
And tried to install again the file CHRONOFORMS_V4.0.1_J2.5.zip
​
But the Antivirus from Microsoft detected this Backdoor:PHP/Dirtelti.MTF and prohibited the download. (blocked)
​
Any suggestion (beside upgrading, I know)?
​
best
Lucashttp://www.chronoengine.com/forums/posts/t87195/chronoforms-action-file-missing.html

Hi Lucas,
​
Where or what exactly is PHP/Dirtelti.MTF ?

Hi Max,
I'm running Microsoft Antivirus in both machines (me and my client)
I tried to download the ZIP package and got the Chrome error message
https://ibb.co/TMkb63X

Best,
Lucas

ok Max tks

check if you get the same problem when you download the v7 ?

ok I will.
Just a suggestion for this forum: when I make login on the side bar at the right, it goes to my profile. Could just stay on the page, ok?
Thanks a lot
Best
Lucas

OK! 🙂

I tried to install V7 on joomla 3. But couldn´t import V4 forms.
Then I tried to install V4 on joomla 3. It keeps thinking its a virus.

Hello dear fellows
After 347 attempts and tries, now I have this:
​
XAMPP updated with:
PHP 7.2.32
MySQL 5.5-10.4.13
Apache 2.4.43
​
Joomla updated to 3.9.20
Chronoforms 5.0.17 plugin 5.0
Chronoconnectivity 5
​
I have also installed ARTData plugin to deal with the table (but could get rid of it if you show me an alternative pls).
​
The situation is:
- My attempt to update to CF6 didn´t work (couldn't retrieve V4 forms) then I installed 5, restored the forms (but they are not working the same way).
- Chrono forms don´t load EVENTS of the restored forms, only fields.
- I recreated the events of one form, but they don´t show up (and it isn´t recording on the table).
- plugin to insert form inside an article doesn´t work (even being enabled)
- Chronoconnectivity was giving me ACCESS DENIED, so I changed permissions, but still have a blank screen when click in Admin View / View Connection

​

​[file=13226]TeamViewer_MGlfOpoSFM.png[/file]

The problem seems to be triggered by the Antivirus software finding an eval() call in the file administrator/components/com_chronoforms/form_actions/show_val/cfaction_show_val.ctp
​
I downloaded the v4 extension zip fresh, and the found cfaction_show_val.ctp in that spot, so it looks like it's supposed to be there.
​
Windows instantly quarantines (makes inaccessible) the zip when it downloads, so it's hard to investigate the way. I used an Ubuntu system to get the zip and look at the contents.
​
Thought this might help you understand what the OP is experiencing.

thanks for posting adrianb!
​
@Iselbach, if you are going to rebuild the forms anyway then you better use v7

No problem. Lucas could go into the antivirus settings and allow that file, i.e. get it out of quarantine, to get things working again. It needs to be manually permitted, otherwise Windows will keep removing it automatically.