XF 1.4 Threat found by ESET when using my forum

[Fredjo]

Hello everyone !

Each time I launch my forum I get this kind of alarm from ESET.



I really fear something went bad in my installation...

Thanks all for help/suggestion

Fred

 

[MySiteGuy]

Its not anything in the XF installation, it doesn't contain this code. You've got a security issue on the site which has let someone inject that code, probably into one of the templates, or your browser itself is infected (that seems to be a common issue with this particular malware threat).

I'd run malware scans on your server such as Clamav, rkhunter and chrootkit, along with a full virus scan on your computer.

 

[Fredjo]

You've got a security issue on the site which has let someone inject that code, probably into one of the templates,

Can you tell me where I could look ? if I can look manually I mean ?

Thanks for you answer, I'll ask for a scan of the server !