How to prohibit a mobile phone from sending short messages to a certain number?

1, use appman to view the smserv process and close it.

2. Use Fileman to enter drive C and delete the following files.

Under c: \ system \ data \ smserv.app, starter.exe, smserv.rsc, smserv_caption.rsc

80 1009.mdl is in c: \ system \ recogs \

Rogue software analysis (LOGO. EXE、smserv.app)

Analysis of rogue software in this software.

The installation file contains

Logo.exe 4252 bytes.

Themes.dat 2 1528 bytes

According to the documents, it seems very likely that the original theme rogue software is also these two documents.

Enter these two files into the installation package, and run LOGO.EXE after the installation.

Most people may think that LOGO.EXE is a display image similar to BINPDA.EXE.

But you will find that nothing is displayed after running.

In fact, this LOGO.EXE solved the problem. DAT file, this file is a ZIP file.

It contains six files,

Zagmdl.mdl will be saved as file 80 1009.mdl in c:\system\recogs\ for automatic startup.

The other five files will be saved in c:\system\data\, and some * * files will be generated after the program runs.

The safest way is to check the machine. However, it should be possible to delete the following files. Deleted files have not been found yet.

The problem of sending information

c:\system\data\smserv.app。

c:\system\data\smserv.rsc

c:\system\data\starter.exe

c:\ system \ recogs \ 80 1009 . MDL

c:\system\data\updater.app

c:\system\data\updater.rsc

c:\system\reptm.txt

c:\system\logs.txt

C:\system\data\smserv.app。

c:\system\data\Tid.txt

Rogue software running mode, the phone will automatically load c:\system\recogs\ and e:\system\recogs\ to find the automatic start.

Program and start it.

80 1009.mdl will call starter.exe to run the background process.

Starter.exe will call smserv.app to send information automatically.

Because it is only a simple analysis, there is no analysis of the content of the information sent and to whom.