How to painlessly rid an HTML file of a phishing script?

Question

Phishing

It is necessary to clean the site files from viruses and at the same time so that the site continues to work. There are a couple of html files on which avast swears when checking that there is Phishing-WA. Online antiviruses do not see anything. How can you figure out exactly which parts of the code are responsible for phishing? Or maybe there is some program that will help find them?

Answer 1

The answer seems to have been found. The bottom line is that there were several links to secure.aadcdn.microsoft-p.com. The fact is that after persistent climbing on English-language sites, I found that some antiviruses mistakenly recognize this Microsoft service as a phishing site. So nothing can be done about it. Although I threw the file into complex checks on the Internet with several dozen antiviruses, they did not find anything at all. Well, or else you can remove all links, js-code and action attributes in the forms from the file, and only all together. Then the desktop antivirus will stop yelling.

Answer 2

and then figure out how that shit got there

Answer 3

compare the backup (with a clean "non-swearing file") with the current one and clean it from trash.

Answer 4

install wordfence and scan