Jump to content

Archived

This topic is now archived and is closed to further replies.

Gramler

Compromised zip file

Recommended Posts

Compromised zip file

Why does the migica  ATV582-Factory-Files.zip suddenly contain an exe.. and a very cryptic readme that instructs you to run uboot_MX.cmd

This cmd overwrites harddisc0 boot secotors with some interesting stuff... like so: (Take a look yourself for that matter, but here it is)

**************************************************

set src=.\u-boot.bin
set dst=\\?\Device\Harddisk1\Partition0
 
dd if=/dev/zero of=.\sd_bak bs=1 count=0x60000
dd if=%dst% of=.\sd_bak bs=512 count=1
dd if=%src% of=.\sd_bak bs=1 count=444
dd if=%src% of=.\sd_bak bs=512 seek=1 skip=1
 
echo Are sure write to %dst% ?  Dangrous!!!
pause
 
dd if=.\sd_bak of=%dst% bs=512
 
pause

**************************************************

I think... you have some cleaning to do!!

 

 

 

Share this post


Link to post
Share on other sites

×
×
  • Create New...