Created attachment 630394 [details]
20120605_zamantunelindencik.zip password is 'malwares4mple'
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.53 Safari/536.5
Steps to reproduce:
Downloaded from http://www.durumbegenme.com/mozilla.php
Injects www.facebookhile.com/sd.js, which will like 16 different Facebook pages and subscribe to 187 Facebook accounts as the victim.
It shouldn't make requests to Facebook as the user, without their consent.