Android malware silentclient.apk silentservice of root phones (rooted)

threat keywords:

• silentservice
• silentclient.apk
• Log
• LogicDownloads
• datang_gaoyang
• 低聲下載
• 靜默渠道
• com.android.as
• 山寨手機

(remove) system app apk:

- Android 更新 4.1 (system apk)
- SystemThreads (system apk)

path (/sdcard):

/storage/sdcard0/datang_gaoyang/SilentClient.apk
/storage/sdcard0/Log/app_service/*.txt
/storage/sdcard0/LogicDownloads/*/*.apk

Below are fixes at your sole own risks

If not rooted (手機沒 root)
1a) rename path /sdcard/datang_gaoyang to /sdcard/datang_gaoyang.bak
1b) create an empty file /sdcard/datang_gaoyang
2a) rename path /sdcard/Log/app_service to /sdcard/Log/app_service.bak
2b) create an empty file /sdcard/Log//app_service
3a) rename path /sdcard/LogicDownloads to /sdcard/LogicDownloads.bak
3b) create an empty file /sdcard/LogicDownloads
4) reboot

(PS. the /sdcard/Log/app_service/* will keep logging, because the malwares are running, but bugged to download, and will still submitting your IMEI, etc.)

If rooted (手機已 root)

1. remove the above 2 systems apps
2. perform above 1a, 2a, 3a to cleanup
3. reboot

Good luck.

Problematic apks backup for examination:

1. SystemThread_3.0.apk http://goo.gl/08uOp
2. Android更新_4.1.apk http://goo.gl/Ouljj

to be updated ~

Google Crisis Response - 2011 Sendai 日本仙台8.9級地震

http://www.google.co.jp/intl/ja/crisisresponse/japanquake2011.html

災害情報地圖
http://mw1.google.com/crisisresponse/2011/sendai_earthquake/google/map/sendai_earthquake_2011.html


Google Crisis Response - a google.org project
http://www.google.com/crisisresponse/

Google simplifies the keyboard layout

• Good-Bye: Windows-key, Windows-Menu-key
• Good-Bye: Insert, Delete, Home, End, PgUp, PgDn
• Good-Bye: F1 to F12

• Add: Power button (too near to the Backspace key?)
• Add: Speaker and brightless buttons
• Add: forward/backward buttons

• Replace: CapsLock -> Search

I like the bigger Ctrl and Alt keys, I *never* want or need the Windows Super_L and Super_R.



Here I have some new todos: change shortcut keys for awesome, openbox, vim, vimperator, and tmux.conf

Script to generate script, takes care of read permission with sudo

Instead of edit checking afterwards a manual typed script, write a prove script to generate later on scripts.

System change, the script will change while if it can.

Build machine(s) to reproduce machines :)

put it into for example ~/.bashrc will generate a file for afterwards sourc-ing.

程式產生程式，以腳本產生腳本，
程式跟隨系統改變自行更新。

	#!/bin/sh
	P=/sys/devices/virtual/dmi/id/
	OUTF=/tmp/thinkpad_info.sh
	[ -d ${P} ] && {
	printf "#!/bin/sh\n#\n# Usage: . ${OUTF}\n\n"
	ls $P | while read F; do
	[ -f "$P/${F}" ] && {
	printf "alias thinkpad_${F}='"
	[ -r "$P/${F}" ] || printf "sudo "
	printf "cat $P${F}'\n"
	}
	done
	} > "${OUTF}"

view raw temp.sh hosted with ❤ by GitHub

	#!/bin/sh
	#
	# Usage: . /tmp/thinkpad_info.sh
	alias thinkpad_bios_date='cat /sys/devices/virtual/dmi/id/bios_date'
	alias thinkpad_bios_vendor='cat /sys/devices/virtual/dmi/id/bios_vendor'
	alias thinkpad_bios_version='cat /sys/devices/virtual/dmi/id/bios_version'
	alias thinkpad_board_asset_tag='cat /sys/devices/virtual/dmi/id/board_asset_tag'
	alias thinkpad_board_name='cat /sys/devices/virtual/dmi/id/board_name'
	alias thinkpad_board_serial='sudo cat /sys/devices/virtual/dmi/id/board_serial'
	alias thinkpad_board_vendor='cat /sys/devices/virtual/dmi/id/board_vendor'
	alias thinkpad_board_version='cat /sys/devices/virtual/dmi/id/board_version'
	alias thinkpad_chassis_asset_tag='cat /sys/devices/virtual/dmi/id/chassis_asset_tag'
	alias thinkpad_chassis_serial='sudo cat /sys/devices/virtual/dmi/id/chassis_serial'
	alias thinkpad_chassis_type='cat /sys/devices/virtual/dmi/id/chassis_type'
	alias thinkpad_chassis_vendor='cat /sys/devices/virtual/dmi/id/chassis_vendor'
	alias thinkpad_chassis_version='cat /sys/devices/virtual/dmi/id/chassis_version'
	alias thinkpad_modalias='cat /sys/devices/virtual/dmi/id/modalias'
	alias thinkpad_product_name='cat /sys/devices/virtual/dmi/id/product_name'
	alias thinkpad_product_serial='sudo cat /sys/devices/virtual/dmi/id/product_serial'
	alias thinkpad_product_uuid='sudo cat /sys/devices/virtual/dmi/id/product_uuid'
	alias thinkpad_product_version='cat /sys/devices/virtual/dmi/id/product_version'
	alias thinkpad_sys_vendor='cat /sys/devices/virtual/dmi/id/sys_vendor'
	alias thinkpad_uevent='cat /sys/devices/virtual/dmi/id/uevent'

view raw thinkpad_info.sh hosted with ❤ by GitHub

1995 September PC Parts Prices (Historical)

整理舊文件時，找回一份 1995 年的電腦部件報價單。

486 VL 大概是 486 Vesa Local Bus
NE2000 是 10/100 Ethernet NIC
SVGA 顯卡 HK$620 !
DX80 大概是 486DX 80 MHz
DX100 大概是 486DX 100 MHz

Conner 425 大概是 Hard Disk Drive
現在竟然有價 100+ euro (November 03, 2010, 08:01:02 PM)
http://forum.avast.com/index.php?topic=65825.0

convert avi to webm

$ time mencoder -ovc lavc -oac lavc -of lavf -lavfopts format=webm -lavcopts acodec=vorbis:vcodec=libvpx -ffourcc VP80 test.avi -o test.webm