Reason: the object is infected by HEUR:Trojan.Script.Generic

[RiaanK]

Hi Guys

 

Please help.

One of my websites provides access denied:

The requested URL cannot be provided

Object URL:

https://vertigo-security.com/product-category/ip-systems/ip-cameras/2-4mp-d-wdr-ip-cameras/

Reason: the object is infected by HEUR:Trojan.Script.Generic

Message generated on: 6/15/2021 3:48:00 PM

 

I checked the website with your threat intelligence portal and it passed all - no viruses found.

https://opentip.kaspersky.com/vertigo-security.com/

 

Please assist.

 

[Flood and Flood's wife]

Hello @RiaanK, 

Welcome!

The issue has been logged with the Kaspersky Virus Team.

Please wait for our reply

 

Thank you🙏

Flood🐳 +🐋

[Igor Kurzin]

Hi Flood family, how is it going? Can you share the INC number with me, thanks. 

[Flood and Flood's wife]

Hi Guys, Please help. One of my websites provides access denied: The requested URL cannot be provided. Object URL: https://vertigo-security.com/product-category/ip-systems/ip-cameras/2-4mp-d-wdr-ip-cameras/. Reason: the object is infected by HEUR:Trojan.Script.Generic. Message generated on: 6/15/2021 3:48:00 PM. I checked the website with your threat intelligence portal and it passed all - no viruses found. https://opentip.kaspersky.com/vertigo-security.com/. Please assist.

 

Hello @RiaanK, 

The Virus analysts have sent a reply: “this is not a false alarm. This site is infected”, clearly it would have been better if they’d provided more information, we’ve sent a follow-up request, seeking to know the infection details. 

We will update you. 

 

Hello @Igor Kurzin, 

Your 🔮 must be working overtime😅 ! 

INC sent! 

Best regards,

Flood🐳 +🐋

[Igor Kurzin]

Hey Flood, 

Thanks for the #, VirusLab analysts have been nice to provide more details: 

Here is the malicious code:
<script type="text/javascript">var _0x1f92=
…
(s);</script>
If you are a webmaster, please remove the above code from the page. Also we strongly recommend that you change passwords to all services that can be used to modify website contents because they may have been stolen.

 

[Flood and Flood's wife]

Hey Flood, 

Thanks for the #, VirusLab analysts have been nice to provide more details: 

Here is the malicious code:
<script type="text/javascript">var _0x1f92=
…
(s);</script>
If you are a webmaster, please remove the above code from the page. Also we strongly recommend that you change passwords to all services that can be used to modify website contents because they may have been stolen.

 

Hello @Igor Kurzin, 

Thank you! It sure helps to have friends in high places😎

Hello @RiaanK, 

Please see the additional information from the Virus Lab, via Igor Kurzin. 

Thank you🙏

Flood🐳 +🐋

[Wesly.Zhang]

Hello, @RiaanK 

It seems OK now. Could you check it from your side?

Regards.

[Flood and Flood's wife]

Hi Wesly, 

It’s been ok since Wednesday, 16 June 2021 15:02. 

Thank you🙏

Flood🐳 +🐋