CariDotMy

 Forgot password?
 Register

ADVERTISEMENT

View: 8682|Reply: 11

gallery.mobile9.com - Most of the Symbian THEMES got MALWARE/SCAMWARE!!!!

[Copy link]
Post time 24-6-2009 11:57 AM | Show all posts |Read mode
Post Last Edit by freekey at 24-6-2009 14:15

You've been WARNED!

Huhuhu..

Salah satu daripadanya yang ini...

http://gallery.mobile9.com/f/819545/

yang dapat daripada sini...

http://gallery.mobile9.com/c/nokia-n82-themes_1592/1/

Dulu aku pernah kena sekali masa guna N82.. Lepas install theme, tetiba bateri aku haus habis.. Pastu nak guna pun mcm hang je manjang..

Pastu aku kena format balik..

Tak lama pastu aku jumpa program SISware - http://www.nokiasoftware.net/pc-applications/11545-sisware-v4-7-built-1722607-a.html

Bila bukak sisfile tu.. Barulah tahu rupanya mmg byk haram jadah ada kt dlm sisfile tu.. :@ :@ :@ :@ :@





Reply

Use magic Report


ADVERTISEMENT


 Author| Post time 24-6-2009 11:59 AM | Show all posts
Tp mcm aku musykil gak..

Mcmana website tu boleh bertahan eh..



Reply

Use magic Report

Post time 24-6-2009 12:12 PM | Show all posts
fuh!!!...nseb bek xdownload papew g...
Reply

Use magic Report

Post time 24-6-2009 01:13 PM | Show all posts
2# freekey

hang sorangje yg donlod.tu yang bertahan tu..hehehe
Reply

Use magic Report

Post time 24-6-2009 01:28 PM | Show all posts
You've been WARNED!

Huhuhu..

Salah satu daripadanya yang ini...

http://gallery.mobile9.com/f/819545/

yang dapat daripada sini...

http://gallery.mobile9.com/c/nokia-n82-themes_1592/1/

...
freekey Post at 24-6-2009 11:57


Camner hang blh kata MOST

Aku scan takde virus pon
Reply

Use magic Report

 Author| Post time 24-6-2009 02:13 PM | Show all posts
Post Last Edit by freekey at 24-6-2009 14:17
Camner hang blh kata MOST

Aku scan takde virus pon
musang_pulut Post at 24-6-2009 13:28

Cuba ko unpack guna sisware tu..

Nanti mcm2 akan ada kt dalam..

aku download drpd symbiantheme & wesbite2 lain takda pun benda2 tu..

Aku cakap most sebab daripada berbelas2 themes drpd situ aku download dulu.. And it was RANDOM! Ada 1 je kot yg clean..

Yg lain semua ada malware.
Reply

Use magic Report

Follow Us
Post time 24-6-2009 04:00 PM | Show all posts
Post Last Edit by freekey at 24-6-2009 14:17


Cuba ko unpack guna sisware tu..

Nanti mcm2 akan ada kt dalam..

aku download drpd symbiantheme & wesbite2 lain takda pun benda2 tu..

Aku caka ...
freekey Post at 24-6-2009 14:13


Senang criter scan la dulu sblm install...
Reply

Use magic Report

 Author| Post time 24-6-2009 04:09 PM | Show all posts
Senang criter scan la dulu sblm install...
musang_pulut Post at 24-6-2009 16:00

dulu masa guna n82 aku tak install antivirus pun..

innov8 yg skrg ni ada norton security,.. tp since dah terkena masa n82 dulu, takda maknanya aku nak cuba2 lagi.. huhuh..

btw, kalau scan guna PC biasa mmglah tak dpt detect apa2 kan? huhuhu..

Actually persoalannya... Kenapa website tu punya theme kena embedd dgn malware tu?? Motif??

Kalau tgk secara kasarnya, that website looks very innocent isn't it?




Reply

Use magic Report


ADVERTISEMENT


Post time 24-6-2009 04:29 PM | Show all posts
dulu masa guna n82 aku tak install antivirus pun..

innov8 yg skrg ni ada norton security,.. tp since dah terkena masa n82 dulu, takda maknanya aku nak cuba2 lagi.. huhuh..

btw, kalau scan guna PC biasa mmglah tak dpt detect apa2 kan? huhuhu..

Actually persoalannya... Kenapa website tu punya theme kena embedd dgn malware tu?? Motif??

Kalau tgk secara kasarnya, that website looks very innocent isn't it?

freekey Post at 24-6-2009 16:09


Sapa plak yg kata tak blh scan guna pc...
Lagi pun sbb 1, 2 file yg ada virus..takkan smpai nak canang site tu ada motif tak baik...

Sendiri mau ingat la.
Reply

Use magic Report

 Author| Post time 24-6-2009 04:31 PM | Show all posts
musang.. aku dah scan kat handphone guna Norton Security tu..

dia tak dpt detect apa2 pun..

tp percayalah... installer sis theme kat mobile9 tu mmg ada smtg..

kalau unpack guna sisware tu tahu arr camner rupa dia..

theme dl dr tempat lain clean je.. kuar satu tab window..

yg dia punya mcm2 kuar ni hah...

tgk kat sini... aku upload screenshot...

http://www.4shared.com/file/1138 ... 9-06-24_162432.html

http://www.4shared.com/file/1138 ... 9-06-24_162346.html





Reply

Use magic Report

 Author| Post time 24-6-2009 04:37 PM | Show all posts
Sapa plak yg kata tak blh scan guna pc...
Lagi pun sbb 1, 2 file yg ada virus..takkan smpai nak canang site tu ada motif tak baik...

Sendiri mau ingat la.
musang_pulut Post at 24-6-2009 16:29

sbb igtkan definition virus utk OS Symbian tak sama..

Dan lagi satu.. Tujuan aku nak bg awareness for those yg tak tahu.. Coz' baper ramai je kan yg nak pegi unpack sis fiel tu dulu sebelum install.

Aku just bgtau based on experience aku sendiri.. Bukan 1, 2 file. Tp berbelas2 file yg diambil secara random drpd website tu.

So, sendiri mau ingatlah jugak.. huhu..



Reply

Use magic Report

Post time 24-6-2009 04:38 PM | Show all posts
9# freekey

EOpInstall( "!:\private\10207114\import\bb78585972a24e55\alag-QXVW26u3.mbm" );
EOpInstall( "!:\private\10207114\import\bb78585972a24e55\alag-QXVW26u3.mif" );
EOpInstall( "!:\private\10207114\import\bb78585972a24e55\alag-QXVW26u3.skn" );
EOpNull( "!:\private\10207114\import\bb78585972a24e55\bb78585972a24e55.ini" );
EOpInstall( "!:\OwnSkin\animator\bb78585972a24e55\0001.dat" );
EOpInstall( "!:\OwnSkin\animator\bb78585972a24e55\0002.dat" );
EOpInstall( "!:\OwnSkin\animator\bb78585972a24e55\0003.dat" );
EOpInstall( "!:\OwnSkin\animator\bb78585972a24e55\0004.dat" );
EOpInstall( "!:\OwnSkin\animator\bb78585972a24e55\0005.dat" );

If ( NOT( PACKAGE( 0x2001F9A7 ) ) )
{
        EMBEDDED_SIS( "Animator4.sis" )
        {
                EOpRun( EInstFileRunOptionInstall, "!:\sys\bin\OSA3Server2.exe" );
                EOpInstall( "!:\sys\bin\OSManager.exe" );
                EOpInstall( "!:\resource\apps\OSManager.rsc" );
                EOpInstall( "!:\private\10003a3f\import\apps\OSManager_reg.rsc" );
                EOpInstall( "!:\resource\apps\OSManager.r31" );
                EOpInstall( "!:\private\10003a3f\import\apps\OSManager_reg.r31" );
                EOpInstall( "!:\resource\apps\OSManager.mif" );
                EOpInstall( "!:\resource\apps\OSManager.mbm" );
                EOpInstall( "c:\private\101f875a\import\[2001F9A7].rsc" );
        }
}

If ( NOT( EXISTS( c:\OwnSkin\osanimator4.ini ) ) )
{
        EOpInstall( "c:\OwnSkin\osanimator4.ini" );
}

If ( NOT( EXISTS( c:\data\others\OwnSkinSaver.swf ) ) )
{
        EOpInstall( "c:\data\others\OwnSkinSaver.swf" );
}

If ( PACKAGE( 0xE0D7B44C ) )
{
        If ( EVarLanguage == ELangPrcChinese )
        {
                EOpText( FileIndex10 );
        } Else If ( NOT( 0x00000000 ) )
        {
                EOpText( FileIndex11 );
        }
}

If ( EVarLanguage == ELangPrcChinese )
{
        EOpText( FileIndex12 );
} Else If ( NOT( 0x00000000 ) )
{
        EOpText( FileIndex13 );
}

If ( APPPROP( 0xEE7DDAA1,0x00000000 ) < 0x00000001 )
{
        EMBEDDED_SIS( "OwnSkin.sis" )
        {
                EOpInstall( "!:\sys\bin\HotLinker3_0xEE7DDAA1.exe" );
                EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDAA1.mif" );
                EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDAA1.mbm" );
               
                If ( EVarLanguage == ELangPrcChinese )
                {
                        EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDAA1.r31" );
                        EOpInstall( "!:\private\10003a3f\import\apps\HotLinker3_0xEE7DDAA1_reg.r31" );
                } Else If ( NOT( 0x00000000 ) )
                {
                        EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDAA1.r01" );
                        EOpInstall( "!:\private\10003a3f\import\apps\HotLinker3_0xEE7DDAA1_reg.r01" );
                }
               
                If ( EVarLanguage == ELangPrcChinese )
                {
                        EOpText( FileIndex7 );
                } Else If ( NOT( 0x00000000 ) )
                {
                        EOpText( FileIndex8 );
                }
        }
}

If ( APPPROP( 0xEE7DDA98,0x00000000 ) < 0x00000001 )
{
        EMBEDDED_SIS( "JoysTube.sis" )
        {
                EOpInstall( "!:\sys\bin\HotLinker3_0xEE7DDA98.exe" );
                EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDA98.mif" );
                EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDA98.mbm" );
               
                If ( EVarLanguage == ELangPrcChinese )
                {
                        EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDA98.r31" );
                        EOpInstall( "!:\private\10003a3f\import\apps\HotLinker3_0xEE7DDA98_reg.r31" );
                } Else If ( NOT( 0x00000000 ) )
                {
                        EOpInstall( "!:\resource\apps\HotLinker3_0xEE7DDA98.r01" );
                        EOpInstall( "!:\private\10003a3f\import\apps\HotLinker3_0xEE7DDA98_reg.r01" );
                }
               
                If ( EVarLanguage == ELangPrcChinese )
                {
                        EOpText( FileIndex7 );
                } Else If ( NOT( 0x00000000 ) )
                {
                        EOpText( FileIndex8 );
                }
        }
}


Ni install script dia...
Tang mana yang hang kata virus tu....
Reply

Use magic Report

You have to log in before you can reply Login | Register

Points Rules

 

ADVERTISEMENT



 

ADVERTISEMENT


 


ADVERTISEMENT
Follow Us

ADVERTISEMENT


Mobile|Archiver|Mobile*default|About Us|CariDotMy

29-11-2024 11:52 PM GMT+8 , Processed in 0.106827 second(s), 24 queries , Gzip On, Redis On.

Powered by Discuz! X3.4

Copyright © 2001-2021, Tencent Cloud.

Quick Reply To Top Return to the list