Threat: JS/TrojanDownloader.Iframe.NKI trojan

Discussion in 'ESET NOD32 Antivirus' started by tanstaafl, Dec 2, 2011.

Thread Status:
Not open for further replies.
  1. tanstaafl

    tanstaafl Registered Member

    Joined:
    Apr 8, 2005
    Posts:
    207
    Is this a false positive? My friends hosting company assures us the site is not infected, but NOD32 is blocking access with the above warning...

    The site is:

    ***

    Help!!
     
    Last edited by a moderator: Dec 2, 2011
  2. dmaasland

    dmaasland Registered Member

    Joined:
    Nov 10, 2010
    Posts:
    468
    It's not a false positive, someone has injected a line of javascript into the index page after the </html> tag. The site is infected.
     
  3. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
  4. dmaasland

    dmaasland Registered Member

    Joined:
    Nov 10, 2010
    Posts:
    468

    Attached Files:

Thread Status:
Not open for further replies.