9 posts
  • Bought between 100 and 499 items
  • Canada
  • Has been a member for 4-5 years
  • Microlancer Beta Tester
Integral says

Hi Everyone,

I ran a Virus scan on my Mac & it came up with a Theme that I bought here, but never ended up using (Client changed their mind). ClamXav scanned the zip file that I downloaded & said it was infected with Trojan.js-75

I googled “Trojan.js-75” but couldn’t find out if it is malicious code, or just a false positive form the Virus scan.

I contacted support to tell them, and they just said to take it up with the author.

Seems to me that given they run the market place they should take more of an interest in the items being sold through their website.

1028 posts
  • Elite Author
  • Sold between 250 000 and 1 000 000 dollars
  • Author had a File in an Envato Bundle
  • Bought between 50 and 99 items
  • Exclusive Author
  • Has been a member for 4-5 years
  • Referred between 500 and 999 users
+1 more
ThemeBlvd says

Is there even the slightest little tiny possibility that you have many themes currently on your computer, and maybe not 100% of them were downloaded legally? Assuming that’s not the case, you did purchase it, right? So have you tried to re-download the file from ThemeForest and confirm the actual package downloaded from ThemeForest contains this trojan? Or are you just going off the old files that were sitting on your computer only?

1799 posts
  • Has been a member for 5-6 years
  • Germany
  • Exclusive Author
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Sold between 5 000 and 10 000 dollars
  • Microlancer Beta Tester
  • Bought between 10 and 49 items
  • Referred between 1 and 9 users
BroOf says

There are viruses which infect other files. The reviewer always check for viruses before they approve the item I think.

9 posts
  • Bought between 100 and 499 items
  • Canada
  • Has been a member for 4-5 years
  • Microlancer Beta Tester
Integral says

ThemeBlvd, you could not have known this, but I do not pirate, not even a little. The files were downloaded from here. Also to double check I did redownload the file on my macbook air (second computer) and re-scanned. It is possible that both computers are affected I guess, but I have them both scanned with current virus definitions and other than the zip file which I have not opened, both have come up clean.

It’s not the Trojan that really bothers me. I have not installed it on a server, so no harm done. It is the fact that I contact support, they passed the buck to the author. I just heard back from the author & he said Envato would have caught anything, so don’t worry.

Kinda makes me wary of future purchase from here.

366 posts WordPress Guy
  • Envato Staff
  • Australia
  • Has been a member for 5-6 years
  • Contributed a Tutorial to a Tuts+ Site
  • Exclusive Author
  • Sold between 100 and 1 000 dollars
  • Bought between 10 and 49 items
  • Referred between 1 and 9 users
  • Reviewer
+1 more
Japh Staff says

Hi Integral, this is a bit of a concern if it turns out the file we’re hosting is infected. Can you please contact me through the form on my profile with a link to the item in question so I can investigate further?

Thanks! :)

1733 posts
  • Exclusive Author
  • Won a Competition
  • Sold between 5 000 and 10 000 dollars
  • Has been a member for 4-5 years
  • Referred between 1 and 9 users
  • Bought between 1 and 9 items
VisualSharing says

I ran a Virus scan on my Mac

I did not know this is reasonable or possible at all. :|

366 posts WordPress Guy
  • Envato Staff
  • Australia
  • Has been a member for 5-6 years
  • Contributed a Tutorial to a Tuts+ Site
  • Exclusive Author
  • Sold between 100 and 1 000 dollars
  • Bought between 10 and 49 items
  • Referred between 1 and 9 users
  • Reviewer
+1 more
Japh Staff says


I ran a Virus scan on my Mac
I did not know this is reasonable or possible at all. :|

All computers should have virus protection! I use Sophos on my MacBook Pro :)

9 posts
  • Bought between 100 and 499 items
  • Canada
  • Has been a member for 4-5 years
  • Microlancer Beta Tester
Integral says

I have heard back from Support:

Thank you for your message to Envato support. I downloaded and tested the ‘xxxxx’ template with ‘ClamXav’ and it’s reporting the file ‘jquery-ui-personalized-1.5.2.packed.js’. This appears to be a false positive from ClamXav as that particular script is relatively common (it’s used to create a tabbed interface) and does not appear to have any offending code within it. You can see this particular script in action on Nettuts+...

Something that simple would have been a welcome message from the get go, rather than “contact someone else”.

I have blocked out the name of the template, as I mentioned early on, I was not positive about it, and do not wish the author any negative exposure.

Thanks Japh & Jami

366 posts WordPress Guy
  • Envato Staff
  • Australia
  • Has been a member for 5-6 years
  • Contributed a Tutorial to a Tuts+ Site
  • Exclusive Author
  • Sold between 100 and 1 000 dollars
  • Bought between 10 and 49 items
  • Referred between 1 and 9 users
  • Reviewer
+1 more
Japh Staff says

Thank you for reporting your progress here, Integral.

I also scanned the item with Sophos on my Mac, and it came up completely clean. So I would agree with Jami that ClamXav is reporting a false positive.

Also, sorry to hear you were given a poor initial response too. That’s not how we usually handle things :)

1733 posts
  • Exclusive Author
  • Won a Competition
  • Sold between 5 000 and 10 000 dollars
  • Has been a member for 4-5 years
  • Referred between 1 and 9 users
  • Bought between 1 and 9 items
VisualSharing says



I ran a Virus scan on my Mac
I did not know this is reasonable or possible at all. :|
All computers should have virus protection! I use Sophos on my MacBook Pro :)

Thanks, I’ll have it in mind. :)

by
by
by
by
by
by