Trojan detection or FP?

polonus · July 22, 2014, 6:22pm

See: Trojans detected:
Object: htxp://1973.fo.ru/
SHA1: 96e56c786fe3b8a19dc2de7a9232149b7b4441c2
Name: TrojWare.JS.Agent.JL
Site blacklisted and likely compromised according to Sucuri’s.
Detected here: https://www.virustotal.com/nl/url/e2fc41d33eb75380ff4486bf710563af8fc34b8b984a8bfe61916075af29d2a7/analysis/
avast! should detect this as: JS:Includer-UN [Trj]
On site Outdated Web Server Nginx Found: nginx/1.2.8

pol

Pondus · July 22, 2014, 6:35pm

Tondah · July 23, 2014, 7:25am

hi, i think the main problem is this code: http://pastebin.com/cXwZDC1U/

Donovan · July 23, 2014, 8:54am

Seems like it. Thanks for the confirmation.

~!Donovan

Announcements