javascript - How to fix Javascript obfuscation virus from website

Question

I'm having a problem with the website I'm helping manage. Visitors are getting a JavaScript Obfuscation warning from our site. We haven't purposely obfuscated any of our code, which only leaves a malicious attack as the probable cause. It doesn't look like our antivirus is going to fix the problem. I'm not finding a whole lot of useful information on this issue online. What should I do to address this? Is there some utility that would work for a Linux server that may help us find the source of the problem, and remove the threat?

Answer 1

第一步是将您现在服务器上的内容与您最初放置的内容进行比较。这应该告诉您它是否处于您最初部署的相同状态。

如果它不在同一状态，则将其放回该状态（例如，通过从版本控制中获取源代码）并进行全面的安全审核。

如果代码确实是您最初放在那里的代码，则您正在使用的第三方 JavaScript 库（或您自己的库，如果您使用某些技术缩小代码）可能会触发防病毒产品的误报. 如果是这种情况，请找出哪些防病毒软件会触发警告并向该供应商提交误报报告。每个主要的反病毒供应商都有在线提交误报报告的方法。他们通常会在几天内采取行动。