GoFuckYourself.com - Adult Webmaster Forum - View Single Post - WARNING.. JoviCash/InstantAdultCash chubbyschool.com installs keylogger!!

Tempest · 07-02-2007, 07:54 PM

I haven't checked all of the sites for that program so don't know if it's on more sites.. Given the program(s) seemed to have been abondoned I'm just going to remove all links and FHGs.

I was contacted today by one of my trades about this. There's javascript at the bottom of that site (probably all pages). Apparently it installs a keylogger on your system and then they use that to grab credit card info, FTP login etc. so they can compromise your sites etc. as well with the same code.

Apparently this thing is ONLY detected and cleaned using "Kaspersky AntiVirus in full paranoid mode"

The virus is called Trojan-Downloader.JS.Psyme.

I'm still looking at the javscript so will post a little more info when I have it.

07-02-2007, 07:54 PM
Tempest Too lazy to set a custom title Industry Role: Join Date: May 2004 Location: West Coast, Canada. Posts: 10,217	WARNING.. JoviCash/InstantAdultCash chubbyschool.com installs keylogger!! I haven't checked all of the sites for that program so don't know if it's on more sites.. Given the program(s) seemed to have been abondoned I'm just going to remove all links and FHGs. I was contacted today by one of my trades about this. There's javascript at the bottom of that site (probably all pages). Apparently it installs a keylogger on your system and then they use that to grab credit card info, FTP login etc. so they can compromise your sites etc. as well with the same code. Apparently this thing is ONLY detected and cleaned using "Kaspersky AntiVirus in full paranoid mode" The virus is called Trojan-Downloader.JS.Psyme. I'm still looking at the javscript so will post a little more info when I have it.