Threat: JS/TrojanDownloader.Iframe.NKI trojan

Discussion in 'ESET NOD32 Antivirus' started by tanstaafl, Dec 2, 2011.

Thread Status:
Not open for further replies.
  1. tanstaafl

    tanstaafl Registered Member

    Joined:
    Apr 8, 2005
    Posts:
    207
    Is this a false positive? My friends hosting company assures us the site is not infected, but NOD32 is blocking access with the above warning...

    The site is:

    ***

    Help!!
     
    Last edited by a moderator: Dec 2, 2011
    tanstaafl, Dec 2, 2011
    #1
  2. dmaasland

    dmaasland Registered Member

    Joined:
    Nov 10, 2010
    Posts:
    468
    It's not a false positive, someone has injected a line of javascript into the index page after the </html> tag. The site is infected.
     
    dmaasland, Dec 2, 2011
    #2
  3. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
    tony_m, Dec 2, 2011
    #3
  4. dmaasland

    dmaasland Registered Member

    Joined:
    Nov 10, 2010
    Posts:
    468

    Attached Files:

    dmaasland, Dec 2, 2011
    #4
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...