Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Suspicious Txt I Accidentally Intercepted


  • Please log in to reply
2 replies to this topic

#1 LittleGreenDots

LittleGreenDots

  • Members
  • 444 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Metro Detroit Area
  • Local time:09:01 AM

Posted 20 August 2013 - 03:51 PM

I was attending to my Flickr account and suddenly my computer stopped responding as I attempted to look at the profile of someone who left a comment.  The comment wasn't really a comment but rather some parallel lines and I decided to copy it and when I pasted it in Notepad, this is what I saw.  I have no idea what it is and if it is something I need to explore.  Right after I did this, I scanned my computer with MalwareBytes and it found a number of infected files in PUPs, named WhiteSmoke.  I deleted all those and did another scan and it came back clean, but I'll try a scan online.

Anyway, this strange txt I found was this...and I'm not even sure how or from whence it came.  As I said, I copied a msg on my Flickr page (which may have been a group icon) and this is what I found.  I went to that group and checked the code to paste into msgs for their icon and it wasn't the same.

F.keyListener.on('37,39,74,75', function(e) { if (F.focus_tracker.isInput() || e.altKey || e.ctrlKey || e.metaKey || e.shiftKey) return; if (e.keyCode === 37 || e.keyCode === 75) window.location = '/photos/tooloose-letrek/9525483737/in/photostream/'; if (e.keyCode === 39 || e.keyCode === 74) window.location = '/photos/tooloose-letrek/9528268594/in/photostream/'; });
 

 

 



BC AdBot (Login to Remove)

 


#2 LittleGreenDots

LittleGreenDots
  • Topic Starter

  • Members
  • 444 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Metro Detroit Area
  • Local time:09:01 AM

Posted 21 August 2013 - 07:22 AM

Does anybody know what this code is trying to do?  When I saw the "F.keyListener.on" I am wondering if this has anything to do with a keylogger.  Is this something I should be concerned about?



#3 LittleGreenDots

LittleGreenDots
  • Topic Starter

  • Members
  • 444 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Metro Detroit Area
  • Local time:09:01 AM

Posted 26 August 2013 - 06:44 PM

Is F.Keylistener a keylogger?






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users