File: nedm.swf-(244 B, Loop)
[_] nedm Anonymous 04/15/13(Mon)05:15 No.1944255
nedm
>> [_] Anonymous 04/15/13(Mon)05:42 No.1944267
>244 byte
>> [_] Anonymous 04/15/13(Mon)05:44 No.1944268
Fuck, I think I just ran a virus.
>> [_] Anonymous 04/15/13(Mon)05:49 No.1944269
>>1944268
Yeah me too. Argh.
>> [_] Anonymous 04/15/13(Mon)05:50 No.1944270
/f/ - 0 Day Exploits
>> [_] Anonymous 04/15/13(Mon)05:51 No.1944272
Not claiming to know what I'm doing but if you look for the text in this binary it just looks
like it's trying to load a movie and failing (maybe)
>> [_] Anonymous 04/15/13(Mon)07:14 No.1944305
Wanted NEDM
Did not receive NEDM
0/10
>> [_] Anonymous 04/15/13(Mon)07:23 No.1944309
not even nedm
>> [_] Anonymous 04/15/13(Mon)07:28 No.1944312
Wonder what kind of virus I got this time.
>> [_] Anonymous 04/15/13(Mon)07:48 No.1944319
MIMEType.................: application/x-shockwave-flash
ImageSize................: 4x4
FileType.................: SWF
FrameRate................: 12
FlashVersion.............: 5
Compressed...............: False
ImageWidth...............: 4
Duration.................: 0.08 s
FrameCount...............: 1
ImageHeight..............: 4
Im guessing he just failed at downloading it flash 5 was a while ago.
>> [_] Anonymous 04/15/13(Mon)08:02 No.1944320
OP, it's meant to be called nedm2.swf....
(btw, if you are using windows 8, it starts a forkbomb)
>> [_] Anonymous 04/15/13(Mon)08:41 No.1944331
>>1944305
Same.
>> [_] Anonymous 04/15/13(Mon)09:10 No.1944337
Oh shit, do I reinstall Windows now or something? Motherfucker.
>> [_] Anonymous 04/15/13(Mon)09:13 No.1944341
I REALLY need to break the habit of blindly clicking things that have large numbers of comments.
>> [_] Anonymous 04/15/13(Mon)09:53 No.1944357
This is all it does:
a = System.capabilities.version;
a = a.split(" ");
a = a[1].split(",");
v = Number(a[0]);
if (v >= 8)
{
this.loadMovie("nedm2.swf");
}
So: system.capabilities.version gets the Windows version. This variable is then cut until only
the major version number remains. If this is 8 (so if it is run on Windows 8), it loads the file
"nedm2.swf" - itself - in an infinite loop. Otherwise it does nothing.
>> [_] Anonymous 04/15/13(Mon)10:24 No.1944367
I'd like to thank you guys for saying it was a virus. Now I won't get it.
>> [_] Anonymous 04/15/13(Mon)10:28 No.1944371
>>1944357
Except Windows 8 is 6.2.
>> [_] sage Anonymous 04/15/13(Mon)11:35 No.1944396
op here its not a virus i just failed at uploading
let this die
>> [_] Anonymous 04/15/13(Mon)11:53 No.1944404
>>1944371
System.capabilities.version doesn't use the same layout as the Windows API (e.g. ver/winver)
For example winver returns 6.1.something for Windows 7, but System.capabilities.version returns
"WIN 7,1,0,0"
Source: Adobe themselves. http://help.adobe.com/en_US/as2/reference/flashlite/WS5b3ccc516
d4fbf351e63e3d118ccf9c47f-7fe8.html
>> [_] Anonymous 04/15/13(Mon)12:03 No.1944412
Am I safe if I'm using Linux?
>> [_] Anonymous 04/15/13(Mon)12:07 No.1944414
Implying flash can do jack shit outside of crash your browser.
>> [_] Anonymous 04/15/13(Mon)12:09 No.1944415
ah linux...how i love thee
>> [_] Anonymous 04/15/13(Mon)12:58 No.1944434
>>1944414
>implications
https://www.securelist.com/en/blog/208194112/Adobe_Flash_Player_0_day_and_HackingTea
m_s_Remote_Contr
ol_System
http://www.geexec.com/analysis-and-exploitation-of-adobe-flash-0-day/
>> [_] Anonymous 04/15/13(Mon)13:06 No.1944435
if it were that easy to spread viruses through /f/ every 2nd file would be a virus and this board
probably wouldn't exist
>> [_] Anonymous 04/15/13(Mon)13:37 No.1944444
FUCK
I'm typing this from my laptop
DO NOT OPEN THIS FLASH
IT WILL MOVE YOU OWN HANDS AND DELETE SYSTEM32
>> [_] Anonymous 04/15/13(Mon)14:14 No.1944462
>>1944444
fuck
>> [_] Anonymous 04/15/13(Mon)14:15 No.1944465
So, if I'm using windows 7, it will do nothing, right?
RIGHT????
