Possible site infection?

Today, I received an email from a site user that his Kaspersky AV program was alerting him to malware on my site. The specific file flagged is:

www.fseconomy.net/media/system/js/caption.js

And Kaspersky calls it: HEUR:Trojan.Script.Generic

I uploaded that JS file into a few online scanners, and for the most part nothing was detected. The kaspersky check did confirm what this user said, and Avast also flagged it as "JS:Iframe-EON"

So, I guess my question is... does anyone else have this same js file in their directory structure, or was this file possibly injected?


Any other thoughts appreciated.

Thanks!

I tried to include the js code in between the /code/ tags, but I got an error message:

Forbidden

You don't have permission to access /forum on this server.

That's a core Joomla JS file. Nothing to do with CB it self. There is no iframe usage in that file and is used to style captions overlaying ontop of an image. My guess is those antivirus software are being overaggressive and reporting a false positive. To be safe replace the file from a fresh download of Joomla (extra from Joomla package and upload then replace).