Primarily covering topics about affiliate & search engine marketing, micro & mobile blogging, making money online, search engine ranking & optimization, social media & networking, software & technology, web development & graphic design, and anything else on my mind.
Random header image... Refresh for more!

Comment Spam Warning Trojan Downloader JS Agent FA

by Garry Conn

I have been getting this comment spam show up in my Akismet Spam for about two days now. It links to a site(s) that has that strange IFRAME JavaScript string. Do not approve these comments. Do not click on the hyperlink. I am sorry that I can’t report what this virus does and I am sorry that I can’t provide a screenshot. When I get back home from my son’s sporting event I will try to research more about this and include it in the post.

Comment Spam

Look at the two examples above. The only thing that changes in the message is the title of my post the commenter is referring to. Also, words are misspelling to help trick people that this comment is real.

Here is an update:

Sorry I had a busy morning and didn’t have time to look into this much. I did my virus scan on my computer and then had to go. My anti virus software detected this:

TrojanDownloader:JS/Agent.FA

Popularity: 1% [?]

8 comments

1 Leroy Brown { 08.04.07 at 10:13 am }

Why can’t you report what it does – is it that you don’t know or you can’t say?

2 Garry Conn { 08.04.07 at 12:16 pm }

Sorry about that…

I can’t report what it does because I don’t know what it does. I clicked on it and my virus protection halted some JavaScript thing that tried to access my computer. Truth is, I don’t know what it is… but if you click on the link there is something in the page that tries to download something to your computer or access something from it. I was lucky that my virus protection software thwarted the attempt. I am not a programmer and I am far from being a hacker. All I know to do is protect my computer with virus software. :)

Hope that helps. Are you getting comment spam like this?

3 Tech Bold { 08.04.07 at 12:26 pm }

It is one of those software which are selling for 20-50 bucks and sometimes for over $100. They finds blogs which are recently updated, and then this software places a comment on that blog, while keeping link and some texts fixed.

Like in above case, the only thing which changed was the post’s title in the comment, nothing else.

These kind of sofware actually claim to post hunderds of comments in an hour and are primarily designed to get the PR juice..

Hope that helps. :)

4 Garry Conn { 08.04.07 at 12:55 pm }

Thanks man… yes it does help. So what was up with the Javascript code that was embedded into the website that caused my antivirus software to freak out?

5 Garry Conn { 08.04.07 at 12:58 pm }

Here is a screen shot of what I saw earlier this morning… I did a full virus scan on my computer and all seem to be ok:

6 Garry Conn { 08.04.07 at 1:17 pm }

This actually sounds like the virus I had on my site early last month:
http://www.garryconn.com/wordpress-version-22-hack-warning.php

7 Nirmal { 08.07.07 at 11:35 pm }

Thanks for this write-up. I got some 20-25 comments from this person Daniel with same comment. Actually Akismet has flagged it as Spam. I never went to the sites mentioned by him as I knew it would be some virus.

8 Garry Conn { 08.07.07 at 11:55 pm }

You were the smart one… and curiosity killed the cat for me! Luckily I had some protection. Speaking of which, check out this article:

http://www.garryconn.com/best-antivirus-software.php

I am asking opinions from other bloggers about what anti virus software they like.

Talk to you soon,
Garry

Leave a Comment