JS/Spy.Banker.KF

[Edward3231 0]

Hi there.

Going to website propertycouncil.com.au we get a "threat removed" message saying JS/Spy.Banker.KF was found.  We have contacted the company involved and they state that it is a false positive.  I've run the website through a bunch on online scanners and they all show as negative (no virus).

Is there a way to confirm if this is a false positive (and maybe get the alert removed) or, if it is legit, get some more detail on where the threat is coming from so we can inform the site operators?

Thanks.

[Marcos 5,462]

The detection is correct. Searching for "var timg;" should help an administrator locate the malicious JS.

[Edward3231 0]

I appreciated the quick response and information and have forwarded the information to the site administrator.

Thanks.