Jump to content

site is infected by HEUR:Trojan.Script.Balada.gen

Go to solution Solved by harlan4096,

Recommended Posts

Hi kasperksy report me that my site is infected by HEUR:Trojan.Script.Balada.gen. but the immunify con cpanel and Kasperky Intelligent Portal say that all is Ok.

The site is artedellio.it. There was a problem on the past month by now is resolved.

Link to comment
Share on other sites

  • Solution



This is not a false alarm. This site is infected.

Here is the malicious code:

<script id="sgpb-custom-script-8845">jQuery(document).ready(function(){sgAddEvent(window, "sgpbWillOpen", function(e) ....


If you are a webmaster, please remove the above code from the page. Also we strongly recommend that you change passwords to all services that can be used to modify website contents because they may have been stolen.


Best regards, Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names



  • Like 1
Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in

Sign In Now

  • Create New...