mahdy772 0 Posted July 3 Share Posted July 3 @Marcos hi i read all the old topic that is about JS/Agent.PIV But i could not solve my problem. i got JS/Agent.PIV Error from ESET. i clean all the suspicious Js from my Site, But still ESET show me the JS/Agent.PIV Error. Here is Sucuri Report and quttera Report that show, my website is clean from malware and... . How do I know which files on my website still have problems? quttera Report: https://quttera.com/detailed_report/aradahan.com Sucuri Report:https://sitecheck.sucuri.net/results/aradahan.com Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,842 Posted July 3 Administrators Share Posted July 3 I'm not getting any Js/Agent.PIV trojan detection on your website. Is it still detected when browsing the site? Quote Link to comment Share on other sites More sharing options...
mahdy772 0 Posted July 3 Author Share Posted July 3 yes Marcos still ESET show my JS/Agent.PIV Error. i do not what should i do? Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,842 Posted July 3 Administrators Share Posted July 3 Please provide logs collected with ESET Log Collector then. Quote Link to comment Share on other sites More sharing options...
mahdy772 0 Posted July 3 Author Share Posted July 3 should i sent it here ?? or give a personal way to send you? Quote Link to comment Share on other sites More sharing options...
LesRMed 19 Posted July 3 Share Posted July 3 You can post the logs here. Attachments are only viewable by ESET staff. Quote Link to comment Share on other sites More sharing options...
mahdy772 0 Posted July 10 Author Share Posted July 10 @Marcos hi marcos Unfortunately, I did not reach an agreement with my company to be able to send you the logs. I'm sorry about that. i want to notice that, does your personal ESET or other systems show JS/Agent.PIV trigger when open aradahan.com ??? i got confused and do not know how to solve this problem in my website!! Couldn't it be an False positives ? Because all the infected js were cleaned by the hosting and the scans don't show anything. Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,842 Posted July 10 Administrators Share Posted July 10 The detection is correct. Searching for "function (I, h)" might help you locate the malicious JS. Quote Link to comment Share on other sites More sharing options...
mahdy772 0 Posted July 10 Author Share Posted July 10 Thanks for your reply Marcos I searched the whole site carefully but I didn't find any file or line of code with "function (I, h)". Can you guide me more, where should I look? Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,842 Posted July 10 Administrators Share Posted July 10 10 minutes ago, mahdy772 said: Can you guide me more, where should I look? Unfortunately not. The code may be obfuscated, runtime injected, stored in CMS database instead of a file, etc. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.