The remediation store held 281 legit files misclassified as malware: - 251 EOL-only: live docroot CRLF vs baseline LF (old deploy artifact); strip-trailing-cr diff = 0 (byte-identical modulo line endings). - 30 com_users (archlinexp.eu): Joomla 2018->2019 point-release drift (copyright + Referrer-Policy header), 0 malware markers. The 729 droppers + real injections (event/joomla/storage/helix3) remain. Audit: audit/store-cleanup-2026-07-19.md. Fully revertable. Assisted-by: claude-code@claude-opus-4-8 |
||
|---|---|---|
| .. | ||
| hosting | ||