Author Topic: Threat secured pop-up will not disappear  (Read 967 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Threat secured pop-up will not disappear
« on: August 22, 2018, 03:47:06 PM »
Hi there

(New to the forum and did search for this.. but couldn't see a solution)

I've picked up a tojan called JS:Agent-DZX on my WP website. I know this because Avast told me.

"Threat secured" it says
"We've safely aborted connection...more threats might be lurking, scan my PC"

So I scan the PC, but the pop-up notice keeps appearing. I try to X out the message but it keeps coming back. I drag the message to a different screen, be a short time later it reappears.

I cannot get rid of this message.

Any ideas?

Thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Threat secured pop-up will not disappear
« Reply #1 on: August 22, 2018, 03:50:11 PM »
Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Threat secured pop-up will not disappear
« Reply #2 on: August 22, 2018, 04:30:06 PM »
Quote
    I've picked up a tojan called JS:Agent-DZX on my WP website. I know this because Avast told me.
 
Sucuri site scan >>  https://sitecheck.sucuri.net/results/lawsonmarketing.co.uk

Seems there is a java script with link to >  wowreality.info

https://www.virustotal.com/#/url/49846dead837bc99de4db5cf6e4b203793237aeec0ffd1a6b964149f99f7e006/detection

"This specific URL was identified in malicious campaigns to disseminate malware."

« Last Edit: August 22, 2018, 04:31:43 PM by Pondus »