Page 2 of 3 1 2 3
Reply
Thread Tools
michaaa62 is offline michaaa62
2012-11-13 , 07:31
Posts: 2,101 | Thanked: 1,934 times | Joined on Sep 2008 @ Berlin, Germany
#11
Did you try to check the basic setup of the linux system, like users set up in /etc/shadow (is there shadow~ as a backup?) , groups and their permissions, cronjobs for specific users and system users?
Did you try to get chkrootkit from debian repo installed?
 

The Following User Says Thank You to michaaa62 For This Useful Post:
reinob is offline reinob
2012-11-13 , 08:50
Posts: 1,797 | Thanked: 4,223 times | Joined on Feb 2011 @ Germany
#12
Originally Posted by michaaa62 View Post
Did you try to check the basic setup of the linux system, like users set up in /etc/shadow (is there shadow~ as a backup?) , groups and their permissions, cronjobs for specific users and system users?
Maemo ain't got no /etc/shadow
 

The Following 3 Users Say Thank You to reinob For This Useful Post:
erendorn's Avatar
erendorn is offline erendorn
2012-11-13 , 09:46
Posts: 738 | Thanked: 983 times | Joined on Apr 2010 @ London
#13
can you log the dbus commands used to send sms? (if the program is using that interface)
 

The Following 4 Users Say Thank You to erendorn For This Useful Post:
zitstif is offline zitstif
2012-11-13 , 17:02
Posts: 24 | Thanked: 26 times | Joined on Feb 2011
#14
It's beginning to look like it might have been smscon. When I looked at smscon's logs, it stated something like, "WARNING: running in stolen mode". It would then send SMS messages to +0123456789 periodically. Also ever since removing smscon I haven't had any outgoing sms messages to egypt or romania (YET).

However, I will keep you updated because it might not be smscon.
Last edited by zitstif; 2012-11-13 at 17:10.
 

The Following 6 Users Say Thank You to zitstif For This Useful Post:
sixwheeledbeast is offline sixwheeledbeast
2012-11-13 , 18:44
Posts: 2,280 | Thanked: 4,121 times | Joined on Apr 2010 @ England
#15
Originally Posted by zitstif View Post
It's beginning to look like it might have been smscon. When I looked at smscon's logs, it stated something like, "WARNING: running in stolen mode". It would then send SMS messages to +0123456789 periodically. Also ever since removing smscon I haven't had any outgoing sms messages to egypt or romania (YET).

However, I will keep you updated because it might not be smscon.
You may want to ask in the SMSCON thread and also read the smscon wiki page.
I have been using SMSCON with no issues for sometime.

The +0123456789 number you speak of in the logs maybe incorrect, IIRC some of the smscon.log personal data is stripped for security reasons.
__________________
The stable-beast currently runs...
21.2011.38-1Smaemo8 (CSSU Stable)
2.6.28.10power53 (125-600Mhz SR VDD1&2)

Wiki Admin
sixwheeledbeast's wiki
Testing Squad Subscriber
- mcallerx - tenminutecore - FlopSwap - Qnotted - zzztop - Bander - Fight2048 -


Before posting or starting a thread please try this.
 

The Following 6 Users Say Thank You to sixwheeledbeast For This Useful Post:
peterleinchen's Avatar
peterleinchen is offline peterleinchen
2012-11-13 , 20:26
Posts: 4,086 | Thanked: 8,796 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#16
The +0123456789 is of course a dummy (not a valid country code), so there may be any number behind.
Keep us updated ...
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature
 

The Following 4 Users Say Thank You to peterleinchen For This Useful Post:
demolition is offline demolition
2012-11-13 , 21:44
Posts: 560 | Thanked: 422 times | Joined on Mar 2011
#17
One solution that's worth trying, if you've got an old/other phone about is to get a PAYG sim and the minimum credit. Then use this PAYG number as the smscon "emergency contact". If you try the number of someone you know, warm him/her first: if you wake up at 3 o'clock in the night and check your phone for the time, he/she will get an sms!

smscon is not malware but, yes, it will send messages to the predefined number whenever the phone does something.
 

The Following User Says Thank You to demolition For This Useful Post:
zitstif is offline zitstif
2012-11-14 , 03:27
Posts: 24 | Thanked: 26 times | Joined on Feb 2011
#18
No sms messages out to egypt or romania so far.

For the record I didn't configure smscon either, I just installed it.

I had it installed a year or two ago without having this problem. So I wonder if the maintainers/developers updated it?
 

The Following 3 Users Say Thank You to zitstif For This Useful Post:
zitstif is offline zitstif
2012-11-19 , 06:07
Posts: 24 | Thanked: 26 times | Joined on Feb 2011
#19
So far.. no more outgoing messages to Egypt or Romania.. I think it may have been smscon.
 

The Following User Says Thank You to zitstif For This Useful Post:
cantruchd is offline cantruchd
2012-11-19 , 06:43
Posts: 79 | Thanked: 53 times | Joined on Jul 2010 @ Ho Chi Minh, Viet Nam
#20
Have you tried asking in the smscon thread?
__________________
All about God, love and yoga www.kriyayoga.com
 

The Following User Says Thank You to cantruchd For This Useful Post:
Reply
Page 2 of 3 1 2 3

« Previous Thread | Next Thread »
Thread Tools

 
Forum Jump


All times are GMT. The time now is 18:49.

Contact Us - Home - Archive - Top