Content blocked [Trojan.JS.Redirector.t] Kaspersky AntiVirus

Forum for support for the Kaspersky AntiVirus for WinGate plugin

Moderator: Qbik Staff

Content blocked [Trojan.JS.Redirector.t] Kaspersky AntiVirus

Postby alyork » Dec 11 09 11:37 am

This seems to be a Kaspersky only.

About 2 weeks ago this client web site started getting randomly blocked by Kaspersky. We FTP'd the entire site and ran other AV and spyware checkers against the files and they all came up clean.

We've called the hosting vendor, who can't find any problems either, but have agreed to move the hosting to a different Linux server just to make sure.

We checked with another Wingate user and they are having the same problem.

Is this real or a Kaspersky false positive?

- Al


Content blocked [Trojan.JS.Redirector.t]
Kaspersky AntiVirus 2.0 for WinGate has blocked access to http://bcfosterparents.ca/benefits.php.
The file is infected with Trojan.JS.Redirector.t
Contact your system administrator if you believe this page should not have been blocked
Kaspersky AntiVirus 2.0 for WinGate - http://www.wingate.com

Content blocked [Trojan.JS.Redirector.t]
Kaspersky AntiVirus 2.0 for WinGate has blocked access to http://bcfosterparents.ca/informationkit.php.
The file is infected with Trojan.JS.Redirector.t
Contact your system administrator if you believe this page should not have been blocked
Kaspersky AntiVirus 2.0 for WinGate - http://www.wingate.com

Content blocked [Trojan.JS.Redirector.t]
Kaspersky AntiVirus 2.0 for WinGate has blocked access to http://bcfosterparents.ca/index.php.
The file is infected with Trojan.JS.Redirector.t
Contact your system administrator if you believe this page should not have been blocked
Kaspersky AntiVirus 2.0 for WinGate - http://www.wingate.com
alyork
 
Posts: 95
Joined: Jun 13 08 3:57 pm
Location: Vancouver, Canada

Re: Content blocked [Trojan.JS.Redirector.t] Kaspersky AntiVirus

Postby logan » Dec 11 09 2:47 pm

Those URLs are definitely infected with a javascript redirector. I went to one of the URLs in a controlled environment to view the source code of the page, but didn't have to do any searching as the virus promptly showed itself. Internet Explorer closed and the following message box was displayed.
Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check! System Security will perform a quick and free scanning of your PC for viruses and malicious programs.


The bad engrish gives this one away. These JS viruses are usually a result of someone hacking into the webserver where your website was hosted and inserting a small malicious javascript on your pages.
logan
Qbik Staff
 
Posts: 671
Joined: Oct 19 06 2:49 pm
Location: Auckland, New Zealand

Re: Content blocked [Trojan.JS.Redirector.t] Kaspersky AntiVirus

Postby alshidaa » Jun 16 10 6:52 pm

What is a simple way to remove the trojan virus? I tried downloading avg and it found the virus. The problem is, I left it scanning just in case there were more files and then my computer restarted for those automatic updates. Then when i tried scanning again, the trojan wasnt found. If the virus can hide like that, how can i remove it without using a long manual way, or paying for removal?
external keyword tool
alshidaa
 
Posts: 1
Joined: Jun 11 10 6:49 pm


Return to Kaspersky AntiVirus for WinGate

Who is online

Users browsing this forum: No registered users and 20 guests

cron