How to manually remove TimeBomb from Gemini Images

[khalidomar]

For those who are unfamiliar with Gemini TimeBomb, please read below

Source: Dreambox Wiki

In April 2008, Dream Multimedia allegedly introduced a time bomb into their latest flash to disable the boot loader on counterfeit models. An unofficial firmware group called Gemini who used the latest flash drivers in their firmware, found that flash corruption would be caused on clone DM500-S receivers. Other developers of unofficial firmware groups would find boxes to be affected by this if they use the latest drivers, providing another time bomb is to be introduced.

The TimeBomb only exists in original Gemini images v4.31 or newer for Dreambox model DM500-S.

This tutorial will help you manually remove TimeBomb from original Gemini Images...

Things you'll need

• Linux Machine (32-bit only) (I used Ubuntu Desktop 10.04 32bit on VMWare Virtual Machine). Any other 23-bit Linux OS will do
• Scripts attached with this post
• Original Gemini image that you need to disinfect

Steps

1. Download the required scripts from or scripts.zip
2. Extract scripts to a folder on your Linux machine (I used $HOME/Desktop/scripts)
3. Download original Gemini Image and save it somewhere on your Linux machine
4. Open Terminal window and change directory to the scripts folder from step 2
5. Execute RemoveTimeBomb providing original (infected) Gemini image as the first command-line argument (from step 3) and the name of the new (disinfected, to be created) image as the second argument
   
   

   [I]Generic example:[/I]
   ./RemoveTimeBomb OriginalImage.img NewImage.img
   
   [I]Example:[/I]
   ./RemoveTimeBomb Gemini_0470_DM500_max_var_12122009.img CleanImage.img

6. When done, you should see the following lines in the terminal window (If you see anything else it means that the program was not able to remove the TimeBomb)
   

   ...
   - Checking for TimeBomb... [FOUND]
   - Patching image... [SUCCESS]
   - Creating new image: CleanImage.img... [SUCCESS]
   ...

   The new image as specified in the second command line argument will be created (CleanImage.img in the above example). This image is the same as the original one but with TimeBomb removed. Go ahead an install on your Dreambox 500-S.
7. You may want to take a look at the other information printed in the terminal window for more information about what was done. Here is a sample output for reference (Also see the below screenshot):
   

   khalidomar@Ubuntu-VM-32Bit:~/Desktop/scripts$ ./RemoveTimeBomb Gemini_0470_DM500_max_var_12122009.img CleanImage.img
   
   - Checking required tools... [PASS]
   - Using temporary directory: /tmp/tmp.UpES42Ui4m
   - Extracting from: Gemini_0470_DM500_max_var_12122009.img... [SUCCESS]
   - Checking for TimeBomb... [FOUND]
   - Patching image... [SUCCESS]
   - Creating new image: CleanImage.img... [SUCCESS]
   - Cleanup temporary files and directories
   
   Done!

If you're interested in trying, I have downloaded all original Gemini images (v4.31 and above) and disinfected them all. Below are the download links for the disinfected (clean) images. Feel free to try at your own risk

• Gemini v4.31 NoTimeBomb
• Gemini v4.40 MaxVar NoTimeBomb
• Gemini v4.50 MaxVar NoTimeBomb
• Gemini v4.60 MaxVar NoTimeBomb
• Gemini v4.70 MaxVar NoTimeBomb

[allways]

Re: How to manually remove TimeBomb from Gemini Images

Working Gemini 4.70 better of DM500s? i think GP 4.20 works good on the Box.

[khalidomar]

Re: How to manually remove TimeBomb from Gemini Images

Working Gemini 4.70 better of DM500s? i think GP 4.20 works good on the Box.

The image that you feel comfortable with is probably the best for you specially if it gives you everything you want. However, If you're looking for new features and bug fixes then you may want to try the latest version of the image you're using or perhaps try other images. ****** is your friend if you want to know what was changed between 4.2 and 4.7

[gaivan]

Re: How to manually remove TimeBomb from Gemini Images

Thank you! My DM500-s will be glad mentime I will enjoy all broadcasts opened by satlover!

[anacondama]

Re: How to manually remove TimeBomb from Gemini Images

but how can we sure that the virus was removed??

[peremacedonia]

Re: How to manually remove TimeBomb from Gemini Images

U will sure only when u try it on your box

[zoran89]

Re: How to manually remove TimeBomb from Gemini Images

I still dont understand wrom where is that virus, from manufactorer of box, from image?

[peremacedonia]

Re: How to manually remove TimeBomb from Gemini Images

In April 2008, Dream Multimedia allegedly introduced a time bomb into their latest flash to disable the boot loader on counterfeit models. An unofficial firmware group called Gemini who used the latest flash drivers in their firmware, found that flash corruption would be caused on clone DM500-S receivers. Other developers of unofficial firmware groups would find boxes to be affected by this if they use the latest drivers, providing another time bomb is to be introduced.
it will rewrite the bootloader on your box, bricking it.

[zoran89]

Re: How to manually remove TimeBomb from Gemini Images

So this is something with Dream Multimedia "fight" piracy and CS

[Resident]

Re: How to manually remove TimeBomb from Gemini Images

Definitely not CS. It was just against clones. They wouldn't make linux boxes unless there are people who want to use it for something that requires a linux based box. They could fight piracy by selling cheaper boxes but with all honesty, that's not gonna happen anything soon. I'm not saying they should sell dm800 boxes for 200 bucks like the chinese manufacturers but they could sell it for 300 and people would at least think about buying original boxes.

[anacondama]

Re: How to manually remove TimeBomb from Gemini Images

U will sure only when u try it on your box

nice solution but i think there a software that scan the image and tells if the virus still there or not ...

[peremacedonia]

Re: How to manually remove TimeBomb from Gemini Images

dm500_clone_bomb_checker_v1.0.
Simple utility to check CLONE BOMB inside DM500
here is link
satlover forum link

[khalidomar]

Re: How to manually remove TimeBomb from Gemini Images

dm500_clone_bomb_checker_v1.0.
Simple utility to check CLONE BOMB inside DM500
here is link
satlover forum link

This tool is by itself suspected of containing one or more viruses, but yes, it does identify if your dreambox image is infected with the timebomb or not.

VirusTotal Report:

VirusTotal Full Report: http://www.virustotal.com/file-scan/...1d-1283028399#

[zoran89]

Re: How to manually remove TimeBomb from Gemini Images

But when this time bomb activate what it does to you box, I mean is it make Hardware problem or software problem.

[khalidomar]

Re: How to manually remove TimeBomb from Gemini Images

But when this time bomb activate what it does to you box, I mean is it make Hardware problem or software problem.

Technically, it causes software problem by overwriting the boot loader which makes your box unable to boot. However, the problem cannot be fixed by installing a new image! meaning that FlashWizard and DreamUp cannot be used to fix the problem.

The only way to fix it is to prepare a special JTAG cable and connect it to the internal motherboard of the box to install a new bootloader. This is something that is not easily doable by the average person!

See this ******* video regarding JTAG'ing your Dreambox: Dreambox 500 Jtag Tutorial