Mobilfunk-FAQ  
   
 

Start Spielhalle Bilderupload Schlagworte Handywerkstatt
Zurück   Mobilfunk-FAQ > Verzeichnis aktueller Mobiltelefonviren


Thema geschlossen
 
LinkBack Themen-Optionen Ansicht
Alt 23.07.2007, 19:35   #11 (Permalink)
Administrator
Name: Christian
Handy: Nokia N95, FuSi Pocket Loox 720
Netzbetreiber: Vodafone
 
Avatare sind nur für MFF-Mitglieder sichtbar!
 
Bike Mania Champion!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045
Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
Standard [SymbianOS] SymbOS.Commwarrior.K

Risiko: sehr gering
Typ: Wurm
entdeckt am: 05.06.2006
auch bekannt als: Commwarrior.L [F-Secure]

Information:

SymbOS.Commwarrior.K is a worm that runs on Series 60 phones and is a minor variant of SymbOS.Commwarrior.D. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multimedia Cards (MMC) as a randomly named .sis file.

technische Details:

The Trojan reportedly arrives as a randomly named .sis file.

Before the .sis file is installed, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems. If the user clicks yes, the device will display the following message prompting the user to install the threat:

Install
Chat

When SymbOS.Commwarrior.K is executed, it performs the following actions:
Creates the following files:

[DriveLetter]\System\apps\Filexplorer\Filexplorer.exe (A copy of SymbOS.Commwarrior.D)
[DriveLetter]\System\apps\Filexplorer\systems.mdl

Runs ultraplayer.exe, which creates the following files on the compromised device's memory card:

e:\System\recogs\Systems.mdl
e:\System\Systems\Systems.mdl
e:\System\Systems\Filexplorer.exe

Rebuilds a .sis file from the above files and copies it to the following location:

e:\System\Systems\Filer.sis

Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute.

Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Filer.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following:

Subject: Mierda Estatut!!
Message: PoltiTonos paramoviles,descarga ya!
Subject: Comela!
Message: Nuevo Virus THX para los Nokia s60s. Instala
Subject: Quieres Reirte
Message: Todos vendemos. Gracias Carod!
Subject: Morena
Message: Conseguir eso.. Maldito Sea!
Subject: PC-CITY
Message: Carod eres un cabron, Estatuto. Politonos de Neng !!. Follatela!
Subject: Mis Albumes
Message: Valencia,ciudad de Campeones. Viva el VCF!Solo Nokia.
Subject: Sonitonos Nokia
Message: Politono Popcorn anuncio renault clio
Subject: Carod Rovira HPuta!
Message: Vodafone y Amenase fusionan. Compra un Nokia.com
Subject: A mi novia Less
Message: Solo trabajemos 6 horas diarias .....!
Subject: Se busca gente
Message: Manda tu curriculum a esta direcciony llamaran!
Subject: Antena 3 y Telecinco...
Message: Diapositiva PowerPoint ensymbian.com
Subject: Mi e-mail es este
Message: Mario y yo nos casamos en 2 meses!!.
Subject: Feliz Cumple!!!
Message: Felicidades!!!! Tienes una postal aki!
Subject: Orgullo Gay
Message: Descarga nuevos sonitonos aqui!
Subject: Mi Exnovia!
Message: Mp3 Player para Nokia series 60. Instalalo yaa!
Subject: Mi foto erotic@
Message: Coleccion de mis fotoalbum fallas 2006!!!
Subject: Quedamos a tomar algo?
Message: Viva las fallas de Valencia, mascletas online
Subject: Ayudanos co
Message: ntra la drogadiccion, colabora ACDV 1 Euro.
Subject: Me he cambiado..
Message: Me he cambiado la direccion de email, esta
Subject: Llamame cuando veas
Message: Problema de bateria en Nokia!
Subject: Cari!!
Message: AMD!!!Universidad de Madrid y Valencia.
Subject: Nuevas Tiendas!
Message: Hay que pagar para respirar y mear
Subject: Movistar!
Message: Fernando Alonso te envia una invitacion!Sr Arganda

[Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten
Hangman ist gerade online  
Alt 23.07.2007, 19:37   #12 (Permalink)
Administrator
Name: Christian
Handy: Nokia N95, FuSi Pocket Loox 720
Netzbetreiber: Vodafone
 
Avatare sind nur für MFF-Mitglieder sichtbar!
 
Bike Mania Champion!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045
Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
Standard [SymbianOS] SymbOS.Commwarrior.L

Risiko: sehr gering
Typ: Wurm
entdeckt am: 05.06.2006
auch bekannt als: Commwarrior.M [F-Secure]

Information:

SymbOS.Commwarrior.L is a worm that runs on Series 60 phones. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multmedia Cards (MMC) as a randomly named .sis file.

The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed.

technische Details:

When SymbOS.Commwarrior.L is executed, it performs the following actions:
Displays the following message prompting the user to install the threat:

Install
NortonPro.:

Creates the following files:

[DRIVELETTER]\system\apps\NortonDatas\Firewallpro.exe (detected as SymbOS.Commwarrior.E)
[DRIVELETTER]\system\apps\NortonDatas\Protect.mdl

Runs Firewallpro.exe, which creates the following files on the compromised device's memory card:

e:\System\recogs\Protect.mdl
e:\System\systems\Protect.mdl
e:\System\systems\Firewallpro.exe

Rebuilds a .sis file from the above files and copies it to the following location:

e:\System\systems\Read!.sis

Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute.

Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Read!.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following:

Subject: Norton AntiVirus
Message: Instalacion paramoviles,instalar ya!

Subject: Paulina
Message: Nuevo Antivirus para los Nokia s60s. Instala

Subject: Quieres Reirte
Message: Todos vendemos. Gracias Maria!

Subject: Deejay
Message: Conseguir eso.. Maldito Sea!

Subject: HP-CITY
Message: Veroo eres un zorron, guarrita. Instalalo si eres tu. Instala!

Subject: Mis Albumes
Message: Maria! Traeme las bragas de tu madre!!!!! Solo Nokia.

Subject: Sonitonos Nokia
Message: Politono Popcorn anuncio renault clio

Subject: Telefonica Anuncia.
Message: Vodafone y Amenase fusionan. Compra un PpPpc.com

Subject: A mi novia XXXX
Message: Solo trabajemos 6 horas diarias .....!

Subject: Se busca gente
Message: Manda tu curriculum a esta direcciony llamaran!

Subject: Antena 3 y Telecincoven
Message: Diapositiva PowerPoint ensymbian.com

Subject: Mi e-mail es este
Message: Jorge y yo nos casamos en 2 meses!!.

Subject: Feliz Cumple!!!
Message: Felicidades!!!! Tienes una postal aki!

Subject: Amor Libre!
Message: Descarga nuevos sonitonos aqui!

Subject: AmorVirtual
Message: Mp3 Player para Nokia series 60. Instalalo yaa!

Subject: Mi tema erotico
Message: Coleccion de mis fotoalbum fallas 2006!!!

Subject: Quedamos a tomar algo?
Message: Viva las fallas de Valencia, mascletas online

Subject: Ayudanos, mo
Message: vilforum,todo sobre movilesy demas......com

Subject: Me he cambiado..
Message: Me he cambiado la direccion de email, esta

Subject: Llamame cuando veas
Message: Problema de bateria en Nokia!

Subject: Mira!!
Message: Ole!!!Universidad de Madrid y Valencia.

Subject: Nuevas Tiendass
Message: Hay que pagar para respirar y mear

Subject: Movistar!
Message: Fernando Alonso te envia una invitacion!Sr Gonzalo

[Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten
Hangman ist gerade online  
Alt 23.07.2007, 19:42   #13 (Permalink)
Administrator
Name: Christian
Handy: Nokia N95, FuSi Pocket Loox 720
Netzbetreiber: Vodafone
 
Avatare sind nur für MFF-Mitglieder sichtbar!
 
Bike Mania Champion!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045
Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
Standard [SymbianOS] SymbOS.Commwarrior.M

Risiko: sehr gering
Typ: Wurm
entdeckt am: 22.06.2006
auch bekannt als: Commwarrior.N [F-Secure]

Information:

SymbOS.Commwarrior.M is a worm that runs on Series 60 phones. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multmedia Cards (MMC) as a randomly named .sis file.

technische Details:

The Trojan reportedly arrives as a randomly named .sis file.

Before the .sis file is installed, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems. If the user clicks yes, the device displays the following message prompting the user to install the threat:

Install
NortonPro.:

When SymbOS.Commwarrior.M is executed, it performs the following actions:

Creates the following files:

[DRIVELETTER]\system\apps\NortonDatas\Firewallpro.exe (A copy of SymbOS.Commwarrior.M)
[DRIVELETTER]\system\apps\NortonDatas\Protect.mdl

Runs Firewallpro.exe, which creates the following files on the compromised device's memory card:

e:\System\recogs\Protect.mdl
e:\System\systems\Protect.mdl
e:\System\systems\Firewallpro.exe

Rebuilds a .sis file from the above files and copies it to the following location:

e:\System\systems\Read!.sis

Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute.

Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Read!.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following:

Subject: Norton AntiVirus
Message: Instalacion paramoviles,instalar ya!

Subject: Paulina
Message: Nuevo Antivirus para los Nokia s60s. Instala

Subject: Quieres Reirte
Message: Todos vendemos. Gracias Maria!

Subject: Deejay
Message: Conseguir eso.. Maldito Sea!

Subject: HP-CITY
Message: Veroo eres un zorron, guarrita. Instalalo si eres tu. Instala!

Subject: Mis Albumes
Message: Maria! Traeme las bragas de tu madre!!!!! Solo Nokia.

Subject: Sonitonos Nokia
Message: Politono Popcorn anuncio renault clio

Subject: Telefonica Anuncia.
Message: Vodafone y Amenase fusionan. Compra un PpPpc.com

Subject: A mi novia XXXX
Message: Solo trabajemos 6 horas diarias .....!

Subject: Se busca gente
Message: Manda tu curriculum a esta direcciony llamaran!

Subject: Antena 3 y Telecincoven
Message: Diapositiva PowerPoint ensymbian.com

Subject: Mi e-mail es este
Message: Jorge y yo nos casamos en 2 meses!!.

Subject: Feliz Cumple!!!
Message: Felicidades!!!! Tienes una postal aki!

Subject: Amor Libre!
Message: Descarga nuevos sonitonos aqui!

Subject: AmorVirtual
Message: Mp3 Player para Nokia series 60. Instalalo yaa!

Subject: Mi tema erotico
Message: Coleccion de mis fotoalbum fallas 2006!!!

Subject: Quedamos a tomar algo?
Message: Viva las fallas de Valencia, mascletas online

Subject: Ayudanos, mo
Message: vilforum,todo sobre movilesy demas......com

Subject: Me he cambiado..
Message: Me he cambiado la direccion de email, esta

Subject: Llamame cuando veas
Message: Problema de bateria en Nokia!

Subject: Mira!!
Message: Ole!!!Universidad de Madrid y Valencia.

Subject: Nuevas Tiendass
Message: Hay que pagar para respirar y mear

Subject: Movistar!
Message: Fernando Alonso te envia una invitacion!Sr Gonzalo

[Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten
Hangman ist gerade online  
MFShop24
Alt 23.07.2007, 19:44   #14 (Permalink)
Administrator
Name: Christian
Handy: Nokia N95, FuSi Pocket Loox 720
Netzbetreiber: Vodafone
 
Avatare sind nur für MFF-Mitglieder sichtbar!
 
Bike Mania Champion!
Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045
Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
Standard [SymbianOS] SymbOS.Commwarrior.N

Risiko: sehr gering
Typ: Wurm
entdeckt am: 22.06.2006
auch bekannt als: Commwarrior.H [F-Secure]

Information:

SymbOS.Commwarrior.N is a worm that runs on Series 60 phones. It attempts to spread using Bluetooth and Multimedia Messaging Service (MMS) messages, and Multmedia Cards (MMC) as a randomly named .sis file.

technische Details:

The Trojan reportedly arrives as a randomly named .sis file.

Before the .sis file is installed, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems. If the user clicks yes, the device displays the following message prompting the user to install the threat:

Install
MensajeMMS

When SymbOS.Commwarrior.N is executed, it performs the following actions:

Creates the following files:

[DRIVELETTER\system\apps\Filexplorer\Filexplorer.ex e, which is the executable file of SymbOS.Commwarrior.N
[DRIVELETTER\system\apps\Filexplorer\systems.mdl

Runs Filexplorer.exe, which creates the following files on the compromised device's memory card:

e:\system\recogs\Systems.mdl
e:\system\Systems\Systems.mdl
e:\system\Systems\Filexplorer.exe

Rebuilds a .sis file from the above files and copies it to the following location:

e:\system\systems\MMSms.sis

Searches for Bluetooth-enabled devices and attempts to send a randomly named copy of the .sis file to all devices that it finds. The worm repeats this action every minute.

Randomly selects a contact phone number from the device's phonebook and sends an MMS message containing the Read!.sis file as an attachment. The MIME type of the attachment is application/vnd.symbian.install. The message is one of the following:

Subject: Erotic EspaceXxX
Message: EspaceXX te regala una, entrada ya!

Subject: Por Ti
Message: Por ti.Ven disfruta de la cena !!. Ven ya!

Subject: Benitocamelas
Message: BenitoCamelas . en Concierto!!

Subject: Marian
Message: Marian Traeme!. Tu si sabes!

Subject: SORTEO
Message: SORTEO Carrefur por Aniversari. Regal Nokias 60 ve

Subject: N-GageQD!!!
Message: Regalamos Nokias N-GageQD. Ven a Lidl!!!! 4 Unidad

Subject: Envia Politonos
Message: Envia Politonos al 3343. Gratis 2!!!.

Subject: Ruralcaja Ofrece...
Message: RuralCaja ofrece2 anos de... Ven [Link nur für registrierte Mitglieder sichtbar.]

Subject: Buscamos Gente
Message: Antena 3. Busca gente para serie TV!!!

Subject: Estatut!!!!!
Message: Carod Rovira es un hijo de Puta!! Cabronazo!!!!

Subject: Zapatero vete a tu casa
Message: El PSOE es una mierda!! 2 Telediario

Subject: Mensaje Antena 3
Message: Promocion Antena 3.Consigue grattis.

Subject: Feliz Cumple!!!
Message: Feliz Cumple!!! Ves como me acuerdo!!!

Subject: Tkm! Amor
Message: Peke eres. Te quiero mucho!!

Subject: Virutas MEX
Message: Virutas MEX mezcla Mexicana de Limon y Peras!!!

Subject: Nokia Tonos!
Message: Nokia Tonos! Coleccion al 343 de ConTxTA!

Subject: Quedamos a tomar algo?
Message: Viva las fallas de Valencia, mascletas online

Subject: Ayudanos co
Message: ntra la drogadiccion, colabora ACDV 1 Euro.

Subject: Me he cambiado..
Message: Me he cambiado la direccion de email, esta

Subject: Llamame cuando veas
Message: Me he quedado sin Gasolina!!!

Subject: 343.!!
Message: SMS!!!Antena 3 lanza nuevos servicios..

Subject: Impuestos Bajos
Message: Hay que pagar para respirar y mear

Subject: Movistar!
Message: Fernando Alonso te envia una invitacion!Sr Arganda

[Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten
Hangman ist gerade online  
Thema geschlossen

Lesezeichen

Stichworte
symbian, commwarrior

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)
 
Themen-Optionen
Ansicht

Forumregeln
Es ist dir nicht erlaubt, neue Themen zu verfassen.
Es ist dir nicht erlaubt, auf Beiträge zu antworten.
Es ist dir nicht erlaubt, Anhänge hochzuladen.
Es ist dir nicht erlaubt, deine Beiträge zu bearbeiten.

BB-Code ist an.
Smileys sind an.
[IMG] Code ist an.
HTML-Code ist aus.
Trackbacks are an
Pingbacks are an
Refbacks are an
Gehe zu



Alle Zeitangaben in WEZ +2. Es ist jetzt 14:03 Uhr.

Besucherzähler:


Powered by vBulletin® Version 3.7.3 (Deutsch)
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.2.0
Template-Modifikationen durch TMS
© 2006-2008 mobilfunk-faq.info
Ad Management by RedTyger