dada life sausage fattener says infected with trojan

So that's why a quick search earlier on did not find the JS code. The interesting thing is that this is different from the URL shown in your question, thus it is being dynamically generated. When doing yet another check with urlQuery on the reported URL we see this request happening: GET /rem2.html HTTP/1.1īut once again this URL leads to something Yahoo already took offline.

But as it shows, the script is no longer harmful so it is safe to visit both URLs assuming Yahoo doesn't put it back. Searching for the URL you obtain, you see my attempts to query it as well as two sites also infected with this script. As you search the b3nimb2eawiki11b1infob1ms string on Google you see that these exploit attempts are quite dated, and it appears that Yahoo already took them offline. Let's query this URL, twice, we see on the first that it can't find a page on Yahoo and the second can't load this. The reported URL does not contain this piece of JS code at first sight. Kaspersky gave me the following code /*'+'') document.getElementById('de'+'f'+'us'+'e').a ppendChild(a)} /*]]>*/

I think it's a hidden trojan, like when you refresh the page you see the warning while it's hidden in files. So next thing I told few guys to test it and when they go to my website the warning appear, not only Kaspersky but Norton too. I also did a clamav on it and it was clean too. So I downloaded all my website and run a scan and it was clean. Kaspersky says my website is infected with trojan.

Dada life sausage fattener says infected with trojan