Trojan-Downloader.JS.LuckySploit.l

[Taffycat]

I went to a website I regularly visit (for graphics) earlier today, and it caused Kaspersky to let out a scream. It had detected a Trojan called "Trojan-Downloader.JS.LuckySploit.l" which it blocked. But do you mind if I just confirm with you that it did successfully block it please? Trusting soul that I am,

When I did a complete scan, it showed up as "Threats have been detected!" but it was zapped, according to the screen snips, right guys? It's just that having been virus-free pretty much forever, I want to be certain I'm interpreting KIS correctly. I know...Duh.

Thank you for looking, I appreciate it.

 

[captain zed]

Hi,

I reckon youre sorted cos of the little box thats ticked for stuff disinfected.KIS isgood i think but keep an eye on it.....ciao....sounds like miaow LOL
Zzzzz

 

[Ian]

Yep, KIS detected the trojan and prevented access when you visited that webpage. I've had similar things happen on legit websites, which I can only assume have been injected with rogue code

 

[muckshifter]

... a website ... for graphics ...


can you PM me the site address

KIS says it "blocked" it, it was blocked.

 

[Taffycat]

Oh Great, thank you guys, I know I was fussing, but just wanted to be entirely sure

Sure thing Mucks, will do

 

[muckshifter]

The "trojan" appears to be a cleverly written javascript code and being injected via an ad ...

I'll email the host.

 

[Taffycat]

That sounds very sneaky. Would I be correct in thinking that you don't even need to click the ad to get into trouble? I always make a point of never deliberately clicking ads.

Thank you for emailing the host - it would be a pity if this site was compromised, because it's one of the best (for this kind of graphics resource).

 

[muckshifter]

Yes, sad to say, you are correct ... it's quite cleverly written.

It is a newish variant, and, if you wanna test out your AV program, still available from the source.

 

[Taffycat]

Yikes, KIS remained quiet when I visited the site to "check" a while ago.... so I'm running scans at the minute.

 

[muckshifter]

Yikes, KIS remained quiet when I visited the site to "check" a while ago.... so I'm running scans at the minute.

Oh, don't worry, it no longer being injected as far as I can see.

The ad is probably on a cycle, may never see it again or you'd have to be there at the right time.

Oh, ang on ... that site aint the source.

 

[historian]

My wife has a laptop, and for the last few nights she has been getting a "Personal Antivirus" program comming up as soon as she boots up to the work bench. This is showing her that she has a Trojan on board among other infections.She did not ask for his prog` it just appeard.She has a antivirus program that came with the laptop,its called "Norton Antivirus" On scanning using Norton it shows that all is well. Could this unknown antivirus prog` be a virus in it self? Because to get rid of all those bugs you have to pay,giving your credit card details.But how do we get rid of it.

historian

 

[Madxgraphics]

My wife has a laptop, and for the last few nights she has been getting a "Personal Antivirus" program comming up as soon as she boots up to the work bench. This is showing her that she has a Trojan on board among other infections.She did not ask for his prog` it just appeard.She has a antivirus program that came with the laptop,its called "Norton Antivirus" On scanning using Norton it shows that all is well. Could this unknown antivirus prog` be a virus in it self? Because to get rid of all those bugs you have to pay,giving your credit card details.But how do we get rid of it.

historian

It sure sounds like a virus Historian..

Ok here goes...

Goto Trend Micro Housecall and run that and see oif it pics anything up..

Then download and instal Super anti Spyware

Then downlad and instal Malwarebyte Free

Boot your computer as normal and run House call and see if it pics up anything...
Then restart the computer in "Safe Mode" and disconect it from the internet and run the later two programs and see what happens...If there is any sort of virus or trojan or spyware one of these is going to pick it up....If anything is picked up and the progs donb't sort it out let us know what has been detected and we can take it from there...

 

[historian]

It sure sounds like a virus Historian..

Ok here goes...

Goto Trend Micro Housecall and run that and see oif it pics anything up..

Then download and instal Super anti Spyware

Then downlad and instal Malwarebyte Free

Boot your computer as normal and run House call and see if it pics up anything...
Then restart the computer in "Safe Mode" and disconect it from the internet and run the later two programs and see what happens...If there is any sort of virus or trojan or spyware one of these is going to pick it up....If anything is picked up and the progs donb't sort it out let us know what has been detected and we can take it from there...

Hello Megxgraphics.
Many thanks for your reply.
My wife did down load Trend Micro Housecall program but could not run it,it would appear that the suspect antivirus prog` is blocking it.
Is that possible? She has now disconected from the internet.
historian.

 

[historian]

It sure sounds like a virus Historian..

Ok here goes...

Goto Trend Micro Housecall and run that and see oif it pics anything up..

Then download and instal Super anti Spyware

Then downlad and instal Malwarebyte Free

Boot your computer as normal and run House call and see if it pics up anything...
Then restart the computer in "Safe Mode" and disconect it from the internet and run the later two programs and see what happens...If there is any sort of virus or trojan or spyware one of these is going to pick it up....If anything is picked up and the progs donb't sort it out let us know what has been detected and we can take it from there...

Hello Maxgraphics.
Thanks for your reply.

My wife did down Trend Micro housecall program but couldn`t run it. It would appear that the suspect antivirus program is blocking it,is that possible?
She has since unplugged her lap top from the internet.
historian.

 

[captain zed]

Check this linky for some info.... http://www.scambusters.org/fakeantivirus.html

Also trust nothing....even this link. I think its okay but you do need to be very careful....i had a fake virus jobby last year and it took forever to dump it....i wasnt joking about trust as many will agree...trust nothing. Scan everything.
Hope this link was some help.
Zzzzz

 

[historian]

Check this linky for some info.... http://www.scambusters.org/fakeantivirus.html

Also trust nothing....even this link. I think its okay but you do need to be very careful....i had a fake virus jobby last year and it took forever to dump it....i wasnt joking about trust as many will agree...trust nothing. Scan everything.
Hope this link was some help.
Zzzzz

Hi Captain Zed.
Thanks for your reply.
I got onto the web site you mentioned,and I subscribed to their news letter.
Then I got another page come up and it was for a sales pitch to buy a book.I scrolled down the very long page,looking for a exit or close button but couldn`t see one so I closed it down.
historian.

 

[captain zed]

I'll try that site again and see what happens....alsoproves that you cant be too careful ,man.

 

[captain zed]

Hi Historian,

Had a good nose about that site and nothing untoward happened to me....actually went looking for stuff tohappen and no luck, good or bad.
Not a great site either looking back. Just it had thta info about fake viruses.
Zzzzz

 

[historian]

It sure sounds like a virus Historian..

Ok here goes...

Goto Trend Micro Housecall and run that and see oif it pics anything up..

Then download and instal Super anti Spyware

Then downlad and instal Malwarebyte Free

Boot your computer as normal and run House call and see if it pics up anything...
Then restart the computer in "Safe Mode" and disconect it from the internet and run the later two programs and see what happens...If there is any sort of virus or trojan or spyware one of these is going to pick it up....If anything is picked up and the progs donb't sort it out let us know what has been detected and we can take it from there...

Hi Madxgraphics.
Just to let you know what progress we have made re:virus.
I down loaded "SuperAntiSpywere" onto my wifes laptop and it
would appear that that virus is no longer with us.Many thanks.
But I really should have thought of it first because I have it on my computer.
I promise to do better.
historian