We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 6537
    • 70 Posts
    Hi,

    I’m curious as to whether anybody else has had this problem. I have a site running 1.0.4, and someone visiting the site who runs Kaspersky informed me that the site was flagged as being infected with a trojan. Guidance from the Kaspersky site is a bit vague:

    A file flagged by Kaspersky as “Heur.Trojan.Generic” is a file that is deemed to have the characteristics of malware after being analysed by the Heuristics engine, but one that has not yet been specifically analysed by the Kaspersky Viruslab.

    This means three things:

    1) When you recieve such a detection, care should be taken not to open or launch the file in question, as it may be malicious.

    2) Because this is a “generic” (so to speak) detection, the file has not been 100% confirmed to be malware by the virus analysts (e.g. it has not yet been given a name), so there is a chance that the file is being mistakenly detected and it is not actually malicious.

    3) The correct course of action would be to isolate the file and send it to the Kaspersky viruslab for analysis, as detailed below.

    How to get rid of Heur.Trojan.Generic

    When you first get the alert that Heur.Trojan.Generic has been detected, read the alert carefully to determine which file is being detected. If it is a website URL, send the URL to be checked by the viruslab by using, the online submission webform located here:http://support.kaspersky.ru/virlab/helpdesk.html?LANG=en

    If it is an actual file, do the same thing and upload the file for checking via the web form.

    Alternatively, follow the instructions below to send it from quarantine (note: you must have a mail client installed for this to work):

    Look at the alert and see if there is an option to quarantine the file. Press “quarantine” if the option is given. The file will then be moved into a secure area where it can not do any damage.

    My interpretation of that is that there isn’t necessarily anything wrong or suspect, but it has been flagged because something ’might’ be malware. I am in the process of going through the site files, but so far have found nothing. I am still waiting for the person who detected this problem to forward on info about the flagged file(s).

    Thanks,
    Dan
      • 6537
      • 70 Posts
      I probably should have added that, unless I hear differently, Norton and MacAfee aren’t detecting any problems, and Google hasn’t flagged it.