NoAd 0 Posted March 28, 2023 Share Posted March 28, 2023 Hello, One of my contractors send me screen that eset found a trojan on my website, i checked VT scan and it shows 0 threats. https://www.virustotal.com/gui/url/296d86552ff8db4a3c346e13e83fedf5aad9c70e3cd76a15856fabce805014a8/detection https://denofgamers.com JS/Agent.QNJ Please help me found this threat if it exist. Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 202 Posted March 28, 2023 Most Valued Members Share Posted March 28, 2023 9 minutes ago, NoAd said: Hello, One of my contractors send me screen that eset found a trojan on my website, i checked VT scan and it shows 0 threats. https://www.virustotal.com/gui/url/296d86552ff8db4a3c346e13e83fedf5aad9c70e3cd76a15856fabce805014a8/detection https://denofgamers.com JS/Agent.QNJ Please help me found this threat if it exist. Also you are being blocked by Fortinet Try to download the website files to your computer , see which file ESET is sensitive to , replace it with original , or see what has been hijacked between original and modified one. Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 5,070 Posted March 28, 2023 Administrators Solution Share Posted March 28, 2023 Searching for "(118, 97, 114, 32, 100" should help you locate the malicious JS. Link to comment Share on other sites More sharing options...
NoAd 0 Posted March 28, 2023 Author Share Posted March 28, 2023 i disabled WP plugin: FB Messenger Live Chat https://wordpress.org/support/plugin/fb-messenger-live-chat/ The strange code eval from string is no longer present. - can You check now on fortinet and eset ? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,070 Posted March 28, 2023 Administrators Share Posted March 28, 2023 I can't reproduce the detection so it appears that the website is clean now. Link to comment Share on other sites More sharing options...
NoAd 0 Posted March 29, 2023 Author Share Posted March 29, 2023 Thank You for support! Link to comment Share on other sites More sharing options...
Recommended Posts