Lucein 0 Posted August 16, 2022 Share Posted August 16, 2022 hello, Eset is reporting my site has the js/spy.banker.kj on it. But I can not find any information about this malware name on Eset other than some general info about trojans. https://www.virusradar.com/en/search-support/all/js/spy.banker.kj I look in the Eset Log and all I see is the detection, with to website name, but no reference to what it found. I want to see what it found, so that it can be cleaned from the site. Can I get a code line number of where the detection was made? Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here 8/15/2022 3:48:59 PM;HTTP filter;file;https://tnvc.com/shop/tnvpvs-14-l3-gen3-un-filmed-white-phosphor-2;JS/Spy.Banker.KJ trojan;connection terminated;Win-JQEGNH1\lucei;Event occurred during an attempt to access the web by the application: C:\Program Files\Google\Chrome\Application\chrome.exe (8FBCC2973DA7EA0E109D8BA3F3119C994738E6B7).;69F3ACB09F8077979F300F8B60AE538785A9823F; I have scanned every file on the server individually, scanned through the database and went line by line through the HTML code. But can not find any obfuscated ro hashed code that is indicative of a trojan. Where can I get more information about this Trojan and what exactly Eset detected? As the virus software does not detail what it blocked. Online, I find variants a little info about them. But none of that info is helpful in finding what Eset detected. any help would be appreciated. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,238 Posted August 16, 2022 Administrators Share Posted August 16, 2022 A malicious JS is injected in the CSS style section of the detected file: Link to comment Share on other sites More sharing options...
Lucein 0 Posted August 16, 2022 Author Share Posted August 16, 2022 thank you Link to comment Share on other sites More sharing options...
Recommended Posts