Security Scan: Your site is compromised with injected JavaScript. (74)

[AleZane]

Hi,

my Security Scan give me this issue:

"Your site has failed a scan. This means it is vulnerable to attack or already a victim of malicious software." 

Your site is compromised with injected JavaScript. (74)

If I've re-scan the number after Javascript change (80,70,68,66,64,74) and, if I check my site with MageReport it returns zero vulnerability (low risk).

Is it possible that this is a false positive, as I've seen similar posts here indicating?

How can I resolve it?

Thanks

[Talesh]

Hi AleZane, 

The Magento malware world has seen some rapid evolution in the last couple months, it is possible that MageReport is still catching up. The good news is that they'll get there soon and most of the javascript malware that may be on your site is dealt with in a tried and true manner. I literally gave a talk about this in Poland a couple weeks ago. 

If you need help to clean up the site let me know, I'm just languishing between projects right now picking apart old Magento malware.