DanielZ 0 Posted October 25 Share Posted October 25 Hi, can you analize this url please The site is https://vdi.metrogas.com.ar Thanks Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 26 Administrators Share Posted October 26 I'm unable to reproduce it, I assume because the site requires authorization and the alert occurred after logging in? Quote Link to comment Share on other sites More sharing options...
DanielZ 0 Posted October 26 Author Share Posted October 26 Hi Marcos. The error appears after entering the url, before it asks for login. I have added the exclusion in nod to be able to enter the site. Thanks Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 26 Administrators Share Posted October 26 I don't recommend excluding the website or you may get infected. Please provide logs collected with ESET Log Collector. Make sure to select also quarantined files to be collected. Quote Link to comment Share on other sites More sharing options...
DanielZ 0 Posted October 26 Author Share Posted October 26 Quote Link to comment Share on other sites More sharing options...
DanielZ 0 Posted October 26 Author Share Posted October 26 eav_logs.zip Quote Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 4,935 Posted October 26 Administrators Solution Share Posted October 26 The detection is correct. There's a code injected at the end which loads a malicious JS from jscloud.biz. However, this website doesn't exist exist at the moment so this injected code can't do anything now. I strongly recommend removing the site from the list of urls which are not scanned for threats: Quote Link to comment Share on other sites More sharing options...
DanielZ 0 Posted October 26 Author Share Posted October 26 thanks a lot. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.