Friday, July 25, 2008

First Isexplayer. Now Ipornplayer

If you folks recall, I did report about the Isexplayer here earlier. It is the first software exhibiting malware like behavior for Series 60 third edition devices. A software which dials premium rate phone numbers automatically taking advantage of a well hidden license agreement where it does says it will make calls.

Interestingly, after the story broke, the sisx version of the file disappeared from the website and only a java version was available for download. This version is supposedly safer than its symbian counterpart. Now, it seems the sis version is back –albeit under a new name Ipornplayer. The older (Java) version is still available for download on the same URL as earlier. The new Sis file is however on a different – but identical looking URL.

At this moment, I cannot confirm if the application behaves as it used to earlier. It does however have the same license agreement so I do think it’s the same thing repackaged.

Some Screenshots.. er I have edited the images on the screenshot of the webpage for obvious reasons.



EDIT: Removed a screenshot as it showd the link.


UPDATE:Had asked one of my friends to check if the behaviour persists. He tested it for two days and found nothing wrong. Installed the software earlier today on my phone and the first automatic call was made a few minutes ago. So as far as I am concerned the threat sill exists. The license agreement clearly states the call will be made. So they are legally correct.

Further investigation revealed that there are various versions of this software going by the MD5 values. Some thing certainly sounds fishy!


A screenshot of the call log:

1 comment:

Anonymous said...

how do i stop it?