Website - Virus Infected?!

[oldskooladdict]

A colleague is visiting this website: http://www.mfcorp.ae *****WARNING - SUSPECT SITE******

And Kaspersky doesn't like it, here's it's take on the issue:

Event Detection of viruses, worms, Trojans, hack tools happened on computer XX in the domain XX at Mon Jul 20 10:44:27 2009 Malicious HTTP object <http://www.mfcorp.ae/>: detected Trojan program 'Trojan.JS.Pakes.bh'.

Another person also tried the site and got the same. Now, we don't want to contact the firm (they are a customer) and say this if it's just some problem our end..

So, is anyone willing to visit the site and see if they get similar warnings etc?

I know this might be a big ask, but I figured some of you might have test beds for this kind of thing or something!?

I tried Google Safe Browsing report and it came back clear.

[Jay]

I get it as well. AVG

[oldskooladdict]

Thanks Jay, I've told my colleague to inform the client of a potential problem.

[vinnyT]

I just tried, and got the same result.

[smargh]

Any Javascript which starts with $="Z6fpZ3dZ22Z2524Z253dZ2522dw(dc can't be good.

[hopefully that string won't trigger AV...]

[watercooled]

You might want to edit your post to remove the link in case anyone without AV clicks it without reading what it is first.

[CrazyMonkey]

The AV is flagging the injected javascript at the bottom.

You could run the script through FireBug to make it easier to read.

I'd advise locking down the permissions on the folder/file (chmod 444). Make sure anonymous FTP is disabled, restore fresh copies of files effected from a local backup.