Know~Your~Mobile~Virus 13
Posted In:
Mobiles and Latest Mobile Stuffs
.
By AyurWorld Admin
SymbOS\Splashstall...
Description:
SymbOS\Splashstall is the latest mobile trojan that attack S60 devices from booting up. For those innocent user who proceed to the installation step by agreeing and passing the security check, his phone will straight away infected by this malware and the phone will start to reboot itself and it will permanently disable from booting up to the starup menu.
The most interesting part that catching my attention is, while the phone is being rebooted after infected by this malware,
a scary and funny sound will be played "hahaha" then. One's might get shocked if he install this application at night!
Affected Platforms:
Tested on:
- Nokia 6680
- Nokia 3660
Affected:
- Nokia 6680
- Nokia 3660
Analysis/Observation:
This trojan was distributed in an application file and it is spreading in Nokia Theme.SIS
Symtomps:
When user try to install this suspicious *.SIS file, the image shown below is screenshoot taken during installation process:
Method of Infection :
This malware is trying to replace corrupted binaries to the startup system . As a result, the phone will be permanently disable from boot up and it will display a message "Phone Startup-failed, Contact your retailer!".
This malware also drop a sound file into the phone system, while the trojan executed, the sound file will be play then. I assume that this sound file is to make fool on those innocent users who get tricked by this trojan and his phone can't boot up to normal starup mode permanently.
Prevention:
This suspicious Symbian application needs user intervention to be installed on target devices. Upon execution, it prompts the user to install the application the phone. It also prompts the user to select where the said application is to be installed. As always, users should never install third party application from unknown site.
How to uninstall:
There is no known method to fix this trojan except hard formatting the infected device. All data will be lost upon formatting.
For Symbian OS v6.1 such as NOKIA 3650/3660/N-GAGE/QD/Siemens SX-1. There is no known method to fix it except flashing the firmware.
Description:
SymbOS\Splashstall is the latest mobile trojan that attack S60 devices from booting up. For those innocent user who proceed to the installation step by agreeing and passing the security check, his phone will straight away infected by this malware and the phone will start to reboot itself and it will permanently disable from booting up to the starup menu.
The most interesting part that catching my attention is, while the phone is being rebooted after infected by this malware,
a scary and funny sound will be played "hahaha" then. One's might get shocked if he install this application at night!
Affected Platforms:
Tested on:
- Nokia 6680
- Nokia 3660
Affected:
- Nokia 6680
- Nokia 3660
Analysis/Observation:
This trojan was distributed in an application file and it is spreading in Nokia Theme.SIS
Symtomps:
When user try to install this suspicious *.SIS file, the image shown below is screenshoot taken during installation process:
Method of Infection :
This malware is trying to replace corrupted binaries to the startup system . As a result, the phone will be permanently disable from boot up and it will display a message "Phone Startup-failed, Contact your retailer!".
This malware also drop a sound file into the phone system, while the trojan executed, the sound file will be play then. I assume that this sound file is to make fool on those innocent users who get tricked by this trojan and his phone can't boot up to normal starup mode permanently.
Prevention:
This suspicious Symbian application needs user intervention to be installed on target devices. Upon execution, it prompts the user to install the application the phone. It also prompts the user to select where the said application is to be installed. As always, users should never install third party application from unknown site.
How to uninstall:
There is no known method to fix this trojan except hard formatting the infected device. All data will be lost upon formatting.
For Symbian OS v6.1 such as NOKIA 3650/3660/N-GAGE/QD/Siemens SX-1. There is no known method to fix it except flashing the firmware.