
Here is a gallery that is promoting Wildcash with the Moviebox/zlob trojan
porn-abc.com/ike/1666520193/1/
contains a javascript file here
porn-abc.com/js/cchrslib_t_1000.js
which contains this download on a domain registered a few days ago. This/these gallery(s) use to link to a different domain, so I assume they are trying to stay ahead of the scanners
use-play.com/download/use-play1000.exe
Their link to Wildcash is
wildpornreviews.com/mov/fromasstomouth.com/2/005/MTA1ODAxOjU6MTY
which makes their wildcash id 105801
Download this stuff and see how your surfers just won't make it anywhere that will make you money.