[Resolvido] O lindo e maravilho site da caixa fazendo bitdefender gritar, agora saber se é um falso positivo.

Hosco Tecnologia disse:

Bom dia, @PH .

Copie esses arquivos js para um local seguro, retire qualquer atributo de execução e faça uma análise prévia no bloco de notas.
Se forem maliciosos, os códigos geralmente são curtos e fica mais fácil de analisar. Sinceramente, deve ser alerta falso.

var _0xfwaeu=["\x68\x74\x74\x70\x73\x3A","\x70\x72\x6F\x74\x6F\x63\x6F\x6C","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x68\x74\x74\x70\x73\x3A\x2F\x2F","\x68\x74\x74\x70\x3A\x2F\x2F","\x64\x65\x74\x65\x63\x74\x63\x61\x2E\x65\x61\x73\x79\x73\x6F\x6C\x2E\x6E\x65\x74\x2F\x64\x65\x74\x65\x63\x74\x63\x61\x2F\x73\x63\x72\x69\x70\x74\x73\x2F\x45\x39\x4E\x43\x4D\x6C\x6D\x77\x65\x6B\x36\x57\x43\x33\x4A\x52\x64\x6B\x43\x65\x34\x47\x38\x63\x55\x72\x6D\x5A\x7A\x72\x2F\x64\x65\x74\x65\x63\x74\x2E\x6A\x73","\x73\x63\x72\x69\x70\x74","\x73","\x64\x63\x61","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x73\x42\x79\x54\x61\x67\x4E\x61\x6D\x65","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x70\x61\x72\x65\x6E\x74\x4E\x6F\x64\x65","\x69\x6E\x73\x65\x72\x74\x42\x65\x66\x6F\x72\x65","\x74\x79\x70\x65","\x73\x72\x63","\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74","\x61\x73\x79\x6E\x63"];eval(_0xfwaeu[8]+"=document."+[_0xfwaeu[10]]+"('"+_0xfwaeu[6]+"')");window[_0xfwaeu[8]][_0xfwaeu[13]]=_0xfwaeu[15];window[_0xfwaeu[8]][_0xfwaeu[16]]=true;window[_0xfwaeu[8]][_0xfwaeu[14]]=((_0xfwaeu[0]==document[_0xfwaeu[2]][_0xfwaeu[1]])?_0xfwaeu[3]:_0xfwaeu[4])+_0xfwaeu[5];eval(_0xfwaeu[7]+"=document."+_0xfwaeu[9]+"('"+_0xfwaeu[6]+"')[0]");window[_0xfwaeu[7]][_0xfwaeu[11]][_0xfwaeu[12]](window[_0xfwaeu[8]],window[_0xfwaeu[7]]);

MadMax disse:

Se o intuito é apenas consultar o FGTS pode fazer atraves do app específico para Android na playstore.
(Supondo que tenha um smartphone)

PH disse:

var _0xfwaeu=["\x68\x74\x74\x70\x73\x3A","\x70\x72\x6F\x74\x6F\x63\x6F\x6C","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x68\x74\x74\x70\x73\x3A\x2F\x2F","\x68\x74\x74\x70\x3A\x2F\x2F","\x64\x65\x74\x65\x63\x74\x63\x61\x2E\x65\x61\x73\x79\x73\x6F\x6C\x2E\x6E\x65\x74\x2F\x64\x65\x74\x65\x63\x74\x63\x61\x2F\x73\x63\x72\x69\x70\x74\x73\x2F\x45\x39\x4E\x43\x4D\x6C\x6D\x77\x65\x6B\x36\x57\x43\x33\x4A\x52\x64\x6B\x43\x65\x34\x47\x38\x63\x55\x72\x6D\x5A\x7A\x72\x2F\x64\x65\x74\x65\x63\x74\x2E\x6A\x73","\x73\x63\x72\x69\x70\x74","\x73","\x64\x63\x61","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x73\x42\x79\x54\x61\x67\x4E\x61\x6D\x65","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x70\x61\x72\x65\x6E\x74\x4E\x6F\x64\x65","\x69\x6E\x73\x65\x72\x74\x42\x65\x66\x6F\x72\x65","\x74\x79\x70\x65","\x73\x72\x63","\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74","\x61\x73\x79\x6E\x63"];eval(_0xfwaeu[8]+"=document."+[_0xfwaeu[10]]+"('"+_0xfwaeu[6]+"')");window[_0xfwaeu[8]][_0xfwaeu[13]]=_0xfwaeu[15];window[_0xfwaeu[8]][_0xfwaeu[16]]=true;window[_0xfwaeu[8]][_0xfwaeu[14]]=((_0xfwaeu[0]==document[_0xfwaeu[2]][_0xfwaeu[1]])?_0xfwaeu[3]:_0xfwaeu[4])+_0xfwaeu[5];eval(_0xfwaeu[7]+"=document."+_0xfwaeu[9]+"('"+_0xfwaeu[6]+"')[0]");window[_0xfwaeu[7]][_0xfwaeu[11]][_0xfwaeu[12]](window[_0xfwaeu[8]],window[_0xfwaeu[7]]);

JoaoNeto disse:

No caso do Bitdefender, tem o modo de acesso pra banco. Já tentou acessar por ele?

Outra opção é mandar um e-mail pro suporte da Caixa e do Bitdefender falando sobre o ocorrido. Certamente darão algum retorno. O suporte da Bitdefender com certeza dará, pois eles tem um suporte excelente.

MadMax disse:

Para bancos, o ideal é usar uma VM dedicada a isso, caso faça questão de rodar no PC.