Kaspersky "Prevented downloading of a dangerous object"

[Sharif Hossain Syeed]

Hi, I can't access the URL https : // hati l .com / blog/

Kaspersky is showing a message "Reason: object is infected HEUR:Trojan.Script.Generic".

I asked our developer to check the site, but he didn't find any malicious files. 

Can someone assist us to find the malicious code or files or at least give me some hint how to detect them?

[harlan4096]

Welcome to K. Community.

 

I've sent that URL to K. analysts as a possible false positive, waiting for the final verdict.

[harlan4096]

Quote

Hello,

This is not a false alarm. This site is infected.
Here is the malicious code:
;if(ndsw===undefined)   ..........   return A();}};
If you are a webmaster, please remove the above code from the page. Also we strongly recommend that you change passwords to all services that can be used to modify website contents because they may have been stolen.

Best regards, V., Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names