![]() |
| |
|
|
|
#11 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
Risiko: sehr gering Typ: Wurm entdeckt am: 05.06.2006 auch bekannt als: Commwarrior.L [F-Secure] Information: SymbOS.Commwarrior.K is a worm that runs on Series 60 phones and is a minor variant of SymbOS.Commwarrior.D. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multimedia Cards (MMC) as a randomly named .sis file. technische Details: The Trojan reportedly arrives as a randomly named .sis file. Before the .sis file is installed, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems. If the user clicks yes, the device will display the following message prompting the user to install the threat: Install Chat When SymbOS.Commwarrior.K is executed, it performs the following actions: Creates the following files: [DriveLetter]\System\apps\Filexplorer\Filexplorer.exe (A copy of SymbOS.Commwarrior.D) [DriveLetter]\System\apps\Filexplorer\systems.mdl Runs ultraplayer.exe, which creates the following files on the compromised device's memory card: e:\System\recogs\Systems.mdl e:\System\Systems\Systems.mdl e:\System\Systems\Filexplorer.exe Rebuilds a .sis file from the above files and copies it to the following location: e:\System\Systems\Filer.sis Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute. Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Filer.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following: Subject: Mierda Estatut!! Message: PoltiTonos paramoviles,descarga ya! Subject: Comela! Message: Nuevo Virus THX para los Nokia s60s. Instala Subject: Quieres Reirte Message: Todos vendemos. Gracias Carod! Subject: Morena Message: Conseguir eso.. Maldito Sea! Subject: PC-CITY Message: Carod eres un cabron, Estatuto. Politonos de Neng !!. Follatela! Subject: Mis Albumes Message: Valencia,ciudad de Campeones. Viva el VCF!Solo Nokia. Subject: Sonitonos Nokia Message: Politono Popcorn anuncio renault clio Subject: Carod Rovira HPuta! Message: Vodafone y Amenase fusionan. Compra un Nokia.com Subject: A mi novia Less Message: Solo trabajemos 6 horas diarias .....! Subject: Se busca gente Message: Manda tu curriculum a esta direcciony llamaran! Subject: Antena 3 y Telecinco... Message: Diapositiva PowerPoint ensymbian.com Subject: Mi e-mail es este Message: Mario y yo nos casamos en 2 meses!!. Subject: Feliz Cumple!!! Message: Felicidades!!!! Tienes una postal aki! Subject: Orgullo Gay Message: Descarga nuevos sonitonos aqui! Subject: Mi Exnovia! Message: Mp3 Player para Nokia series 60. Instalalo yaa! Subject: Mi foto erotic@ Message: Coleccion de mis fotoalbum fallas 2006!!! Subject: Quedamos a tomar algo? Message: Viva las fallas de Valencia, mascletas online Subject: Ayudanos co Message: ntra la drogadiccion, colabora ACDV 1 Euro. Subject: Me he cambiado.. Message: Me he cambiado la direccion de email, esta Subject: Llamame cuando veas Message: Problema de bateria en Nokia! Subject: Cari!! Message: AMD!!!Universidad de Madrid y Valencia. Subject: Nuevas Tiendas! Message: Hay que pagar para respirar y mear Subject: Movistar! Message: Fernando Alonso te envia una invitacion!Sr Arganda [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
|
#12 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
Risiko: sehr gering
Typ: Wurm entdeckt am: 05.06.2006 auch bekannt als: Commwarrior.M [F-Secure] Information: SymbOS.Commwarrior.L is a worm that runs on Series 60 phones. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multmedia Cards (MMC) as a randomly named .sis file. The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed. technische Details: When SymbOS.Commwarrior.L is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install NortonPro.: Creates the following files: [DRIVELETTER]\system\apps\NortonDatas\Firewallpro.exe (detected as SymbOS.Commwarrior.E) [DRIVELETTER]\system\apps\NortonDatas\Protect.mdl Runs Firewallpro.exe, which creates the following files on the compromised device's memory card: e:\System\recogs\Protect.mdl e:\System\systems\Protect.mdl e:\System\systems\Firewallpro.exe Rebuilds a .sis file from the above files and copies it to the following location: e:\System\systems\Read!.sis Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute. Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Read!.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following: Subject: Norton AntiVirus Message: Instalacion paramoviles,instalar ya! Subject: Paulina Message: Nuevo Antivirus para los Nokia s60s. Instala Subject: Quieres Reirte Message: Todos vendemos. Gracias Maria! Subject: Deejay Message: Conseguir eso.. Maldito Sea! Subject: HP-CITY Message: Veroo eres un zorron, guarrita. Instalalo si eres tu. Instala! Subject: Mis Albumes Message: Maria! Traeme las bragas de tu madre!!!!! Solo Nokia. Subject: Sonitonos Nokia Message: Politono Popcorn anuncio renault clio Subject: Telefonica Anuncia. Message: Vodafone y Amenase fusionan. Compra un PpPpc.com Subject: A mi novia XXXX Message: Solo trabajemos 6 horas diarias .....! Subject: Se busca gente Message: Manda tu curriculum a esta direcciony llamaran! Subject: Antena 3 y Telecincoven Message: Diapositiva PowerPoint ensymbian.com Subject: Mi e-mail es este Message: Jorge y yo nos casamos en 2 meses!!. Subject: Feliz Cumple!!! Message: Felicidades!!!! Tienes una postal aki! Subject: Amor Libre! Message: Descarga nuevos sonitonos aqui! Subject: AmorVirtual Message: Mp3 Player para Nokia series 60. Instalalo yaa! Subject: Mi tema erotico Message: Coleccion de mis fotoalbum fallas 2006!!! Subject: Quedamos a tomar algo? Message: Viva las fallas de Valencia, mascletas online Subject: Ayudanos, mo Message: vilforum,todo sobre movilesy demas......com Subject: Me he cambiado.. Message: Me he cambiado la direccion de email, esta Subject: Llamame cuando veas Message: Problema de bateria en Nokia! Subject: Mira!! Message: Ole!!!Universidad de Madrid y Valencia. Subject: Nuevas Tiendass Message: Hay que pagar para respirar y mear Subject: Movistar! Message: Fernando Alonso te envia una invitacion!Sr Gonzalo [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
|
#13 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
Risiko: sehr gering
Typ: Wurm entdeckt am: 22.06.2006 auch bekannt als: Commwarrior.N [F-Secure] Information: SymbOS.Commwarrior.M is a worm that runs on Series 60 phones. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multmedia Cards (MMC) as a randomly named .sis file. technische Details: The Trojan reportedly arrives as a randomly named .sis file. Before the .sis file is installed, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems. If the user clicks yes, the device displays the following message prompting the user to install the threat: Install NortonPro.: When SymbOS.Commwarrior.M is executed, it performs the following actions: Creates the following files: [DRIVELETTER]\system\apps\NortonDatas\Firewallpro.exe (A copy of SymbOS.Commwarrior.M) [DRIVELETTER]\system\apps\NortonDatas\Protect.mdl Runs Firewallpro.exe, which creates the following files on the compromised device's memory card: e:\System\recogs\Protect.mdl e:\System\systems\Protect.mdl e:\System\systems\Firewallpro.exe Rebuilds a .sis file from the above files and copies it to the following location: e:\System\systems\Read!.sis Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute. Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Read!.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following: Subject: Norton AntiVirus Message: Instalacion paramoviles,instalar ya! Subject: Paulina Message: Nuevo Antivirus para los Nokia s60s. Instala Subject: Quieres Reirte Message: Todos vendemos. Gracias Maria! Subject: Deejay Message: Conseguir eso.. Maldito Sea! Subject: HP-CITY Message: Veroo eres un zorron, guarrita. Instalalo si eres tu. Instala! Subject: Mis Albumes Message: Maria! Traeme las bragas de tu madre!!!!! Solo Nokia. Subject: Sonitonos Nokia Message: Politono Popcorn anuncio renault clio Subject: Telefonica Anuncia. Message: Vodafone y Amenase fusionan. Compra un PpPpc.com Subject: A mi novia XXXX Message: Solo trabajemos 6 horas diarias .....! Subject: Se busca gente Message: Manda tu curriculum a esta direcciony llamaran! Subject: Antena 3 y Telecincoven Message: Diapositiva PowerPoint ensymbian.com Subject: Mi e-mail es este Message: Jorge y yo nos casamos en 2 meses!!. Subject: Feliz Cumple!!! Message: Felicidades!!!! Tienes una postal aki! Subject: Amor Libre! Message: Descarga nuevos sonitonos aqui! Subject: AmorVirtual Message: Mp3 Player para Nokia series 60. Instalalo yaa! Subject: Mi tema erotico Message: Coleccion de mis fotoalbum fallas 2006!!! Subject: Quedamos a tomar algo? Message: Viva las fallas de Valencia, mascletas online Subject: Ayudanos, mo Message: vilforum,todo sobre movilesy demas......com Subject: Me he cambiado.. Message: Me he cambiado la direccion de email, esta Subject: Llamame cuando veas Message: Problema de bateria en Nokia! Subject: Mira!! Message: Ole!!!Universidad de Madrid y Valencia. Subject: Nuevas Tiendass Message: Hay que pagar para respirar y mear Subject: Movistar! Message: Fernando Alonso te envia una invitacion!Sr Gonzalo [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
|
#14 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
Risiko: sehr gering
Typ: Wurm entdeckt am: 22.06.2006 auch bekannt als: Commwarrior.H [F-Secure] Information: SymbOS.Commwarrior.N is a worm that runs on Series 60 phones. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multmedia Cards (MMC) as a randomly named .sis file. technische Details: The Trojan reportedly arrives as a randomly named .sis file. Before the .sis file is installed, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems. If the user clicks yes, the device displays the following message prompting the user to install the threat: Install MensajeMMS When SymbOS.Commwarrior.N is executed, it performs the following actions: Creates the following files: [DRIVELETTER\system\apps\Filexplorer\Filexplorer.ex e, which is the executable file of SymbOS.Commwarrior.N [DRIVELETTER\system\apps\Filexplorer\systems.mdl Runs Filexplorer.exe, which creates the following files on the compromised device's memory card: e:\system\recogs\Systems.mdl e:\system\Systems\Systems.mdl e:\system\Systems\Filexplorer.exe Rebuilds a .sis file from the above files and copies it to the following location: e:\system\systems\MMSms.sis Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute. Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Read!.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following: Subject: Erotic EspaceXxX Message: EspaceXX te regala una, entrada ya! Subject: Por Ti Message: Por ti.Ven disfruta de la cena !!. Ven ya! Subject: Benitocamelas Message: BenitoCamelas . en Concierto!! Subject: Marian Message: Marian Traeme!. Tu si sabes! Subject: SORTEO Message: SORTEO Carrefur por Aniversari. Regal Nokias 60 ve Subject: N-GageQD!!! Message: Regalamos Nokias N-GageQD. Ven a Lidl!!!! 4 Unidad Subject: Envia Politonos Message: Envia Politonos al 3343. Gratis 2!!!. Subject: Ruralcaja Ofrece... Message: RuralCaja ofrece2 anos de... Ven [Link nur für registrierte Mitglieder sichtbar.] Subject: Buscamos Gente Message: Antena 3. Busca gente para serie TV!!! Subject: Estatut!!!!! Message: Carod Rovira es un hijo de Puta!! Cabronazo!!!! Subject: Zapatero vete a tu casa Message: El PSOE es una mierda!! 2 Telediario Subject: Mensaje Antena 3 Message: Promocion Antena 3.Consigue grattis. Subject: Feliz Cumple!!! Message: Feliz Cumple!!! Ves como me acuerdo!!! Subject: Tkm! Amor Message: Peke eres. Te quiero mucho!! Subject: Virutas MEX Message: Virutas MEX mezcla Mexicana de Limon y Peras!!! Subject: Nokia Tonos! Message: Nokia Tonos! Coleccion al 343 de ConTxTA! Subject: Quedamos a tomar algo? Message: Viva las fallas de Valencia, mascletas online Subject: Ayudanos co Message: ntra la drogadiccion, colabora ACDV 1 Euro. Subject: Me he cambiado.. Message: Me he cambiado la direccion de email, esta Subject: Llamame cuando veas Message: Me he quedado sin Gasolina!!! Subject: 343.!! Message: SMS!!!Antena 3 lanza nuevos servicios.. Subject: Impuestos Bajos Message: Hay que pagar para respirar y mear Subject: Movistar! Message: Fernando Alonso te envia una invitacion!Sr Arganda [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
![]() |
| Lesezeichen |
| Stichworte |
| symbian, commwarrior |
| Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1) | |
| Themen-Optionen | |
| Ansicht | |
|
|