• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Re-evaluation is in progress....

Support,
My Website (http :// www. techracers .com) is registered in Norton Safe web, verified and re-evaluated.

Now problem is with its report:

Threat Report

Drive-By Downloads

Threats found: 3  

Here is a complete list: (for more information about a specific threat, click on the Threat Name below)

Threat Name:

Web Attack: JSCoinminer Download 8

Location:

http :// www. techracers .com/ startup-jargons

Threat Name:

Web Attack: JSCoinminer Download 8

Location:

http :// www. techracers .com/ hyperledger-vs-ethereum

Threat Name:

Web Attack: JSCoinminer Download 8

Location:

http :// www. techracers .com/ create-cryptocurrency

-------------------

I have checked all the links from the report many times and I can't understand what malicious code you see of threats.
So help me please to figure it out to make it possible to fix.

[Edit: Removed hyperlink of URLs to conform with the Participation Guidelines and Terms of Service]

Replies

Kudos0

Re: Re-evaluation is in progress....

Kudos0

Re: Re-evaluation is in progress....

See this blog announcement on the jscoinminer issue. https://community.norton.com/en/blogs/product-update-announcements/prote...

As noted, it is found in some java script on a web site that is being visited. You need to look for any java script in  the locations noted in your detection.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Re-evaluation is in progress....

Support Thanks for your reply.

I check all the javascript codes on below 3 locations, that you mentioned as infected : 

http :// www.techracers .com/startup-jargons

http :// www . techracers . com/ hyperledger-vs-ethereum

http ://www . techracers . com/create-cryptocurrency

But I didn't found any suspicious code, also I compare this location with other safe location scripts but still there is nothing. Can you please point me to the code that seems to be infected according to you.

Thanks in advance.

Kudos0

Re: Re-evaluation is in progress....

Support, 

Please reply me on above threat asap. Also, please also do re-evaluation once more.

Thanks 

Kudos0

Re: Re-evaluation is in progress....

Do you have any ads on your page? Often, if you use an ad service, these ads can contain the malicious code. This seems to be what is indicated by bjm_s image above where AdGuard blocked your site.

Try changing the ad service you use. Then the site can be re evaluated.

@floplot may be able to get her contacts to check this again.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Re-evaluation is in progress....

Hello


JScoinminer is a web-based detection for a JavaScript cryptocurrency miner that runs in web browsers. The JavaScript coin miner consumes enormous CPU resources, making computer very slow. The JavaScript is loaded in the browser when you visit a webpage hosting the JavaScript. The JavaScript runs as long as you stay on the webpage. As long as the website being visited is injected with the coin mining JavaScript, the website will be blocked by this signature. The computer system is not actually "infected" when this detection triggers.


I think it's the web browser which has to be examined for the JavaScript. The above is taken from Sunil's Blog. It was a drive by so I don't think it was caused by an infected ad. I'm no expert, so I am probably wrong about this.

I can ask the Safe Web Team to re-evaluate it again.

Have a Nice Day and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Re-evaluation is in progress....

What the blog is saying is that the browser is acting on JavaScript that is located on a web page, such as a malformed ad. It is not an issue with any given browser, but users can restrict JavaScript in the browser settings. 

The malware/JavaScript is still located on the web site. Not the user's machine as noted by the last line in your quote.

The computer system is not actually "infected" when this detection triggers

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Re-evaluation is in progress....

No I don't have any ads on this page. Even I manually checked my code many times, and there is not such infected or suspicious I found.

Support, Please re-evaluate my domain again or please point me to the suspicious code.

Kudos0

Re: Re-evaluation is in progress....

Hi Ankit Tech

We have manually analyzed your site 'techracers.com' and found it to be a Malicious Website. So the rating will remain red in safeweb.norton.com.

https://safeweb.norton.com/report/show?url=techracers.com

Cops

Kudos0

Re: Re-evaluation is in progress....

Thanks for your reply. But my concerned is still the same that -  Why don't you provide me the part of code that seems for us a suspicious. Please point me to suspicious code.

Kudos0

Re: Re-evaluation is in progress....

You already know the locations of the files from the detailed report information you posted in your first post. 

And the last one is almost self explanatory. 

Location:

http :// www. techracers .com/ create-cryptocurrency

Are you saying you cannot find these file locations on your web site's code?

Check with your web site host to see if they have any security scan service to clean your site.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Re-evaluation is in progress....

Hello

You can also submit your site to www.virustotal.com    They also analyze websites.

Have a Nice Day and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Re-evaluation is in progress....

Hi,

Yeah I know the locations of the file. But what I want to know is that, which code/script on those specific locations seems to be malware for you. 
 
And about this location - http :// www. techracers .com/ create-cryptocurrency
create-cryptocurrency 
 is the text in route, there is nothing wrong.

Kudos0

Re: Re-evaluation is in progress....

Hello

Creating cryptocurrency may be what's wrong.

https://www.symantec.com/blogs/threat-intelligence/browser-mining-cryptocurrency

Have a Nice Day and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Re-evaluation is in progress....

Hi Support,

Can you please re-evaluate it again.

Kudos0

Re: Re-evaluation is in progress....

Hello

Please stay tuned to this thread for a response from the Safe Web Team on Thursday night after midnight EST.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Accepted Solution
Kudos0

Re: Re-evaluation is in progress....

Hi Ankit Tech

We have manually analyzed your site 'techracers.com' and found it to be clean so we have changed its rating to green.

https://safeweb.norton.com/report/show?url=techracers.com

Cops

This thread is closed from further comment. Please visit the forum to start a new thread.