simontechdev Posted January 14, 2022 ID:1497440 Share Posted January 14, 2022 Scanned the server multiple times and checked multiple files manually, but found no malware present anywhere. Yet the site powetc.com has been flagged as having 235 incidents of malware today. Could you please provide me with log of what you measured, as the site is actually clean ? Link to post Share on other sites More sharing options...
Staff thisisu Posted January 14, 2022 Staff ID:1497452 Share Posted January 14, 2022 Hello, It's this url path that is the reason for the block: https://poweretc.com/media/com_fabrik/js/dist/chosen-loader.js It's still active otherwise I would remove the block. Regards Link to post Share on other sites More sharing options...
simontechdev Posted January 14, 2022 Author ID:1497529 Share Posted January 14, 2022 Ok, what part of the code in this file should you block the site for: ? /*! Fabrik */ require(["fab/fabrik","jquery"],function(n,d){n.buildChosen||(n.buildChosen=function(n,i){if(void 0!==d(n).chosen)return d(n).each(function(n,e){var o,a=d(e).data("chosen-options");o=a?d.extend({},i,a):i,d(e).chosen(o),d(e).addClass("chzn-done")}),!0},n.buildAjaxChosen=function(n,e,o){if(void 0!==d(n).ajaxChosen)return d(n).addClass("chzn-done"),d(n).ajaxChosen(e,o)})}); Please advice how this code that I wrote is in any way Malware??? I think you need to fix your malware detector, because it's obviously not working properly. You obviously are having a clearly false positive here. Link to post Share on other sites More sharing options...
Staff thisisu Posted January 15, 2022 Staff ID:1497562 Share Posted January 15, 2022 Hi Simon, I know you're stressed but there are multiple other vendors detecting this file too. I believe this is the portion that is being flagged as malware. I could be wrong, I don't code in javascript. I've requested a second opinion from a colleague would know which section of the file was considered malicious That portion seems to be seen around 4 other javascript files on VirusTotal with a detection rate of about 15/58. Regards Link to post Share on other sites More sharing options...
Staff Solution BjelakovicL Posted January 15, 2022 Staff Solution ID:1497571 Share Posted January 15, 2022 This domain's been cleaned up. Block will be removed in the next database update. Sorry for the inconvenience. Link to post Share on other sites More sharing options...
Recommended Posts