cyb 0 Posted December 13, 2023 Share Posted December 13, 2023 I am using ESET PROTECT and ESET Endpoint Security. One of my user has security alerts when accessing https://paolimoto.com website. Not our site but we can, if needed, suggest changes. ESET Endpoint Security complains about an "HTML/ScrInject.B (Trojan)". I see no issue for this website on Quterra : https://quttera.com/detailed_report/paolimoto.com On ESET PROTECT, I see 2 quarantined objects: https://paolimoto.com: 0c0ddd91f49c66de247c41e7d63fd8eb0ed2f909 https://paolimoto.com/maxxess-chambery : 90f9c7abffda694c4b788911d3d1b1084b437ddf How can I know/double check what is the real issue with this website and fix it? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted December 13, 2023 Administrators Share Posted December 13, 2023 The website still contains PowerShell/TrojanDropper.Agent.NO trojan. Please scan all files with an ESET scanner which will detect the malicious file(s). Link to comment Share on other sites More sharing options...
itman 1,674 Posted December 13, 2023 Share Posted December 13, 2023 3 hours ago, cyb said: One of my user has security alerts when accessing https://paolimoto.com website. Other security solutions detect malware on this web site: https://www.virustotal.com/gui/url/b46e440427a1adca8708e0d7ae228ff3380b47975ae146cc749f610ffea6357e Link to comment Share on other sites More sharing options...
Recommended Posts