Risiko: sehr gering
Typ: Trojaner
entdeckt am: 18. Januar 2006
auch bekannt als: keine Angabe

Information:

SymbOS.Bootton.E is a Trojan horse that restarts the mobile device when executed. It also drops corrupted components that cause the reboot to fail. The Trojan runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

The Trojan reportedly arrives as Restart.S60.SIS. When the user clicks on the .sis file, the phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems.

technische Details:

When SymbOS.Bootton.E is executed, it performs the following actions:
Displays the following message:

Restart

Drops the following files on the compromised device:

[DRIVE LETTER]:\Restart.dll
[DRIVE LETTER]:\LayoutInst.dll
[DRIVE LETTER]:\System\Apps\Restart\Restart.APP
[DRIVE LETTER]:\System\Apps\Restart\Restart.AIF

Note:
The files restart the mobile device when executed, but due to the presence of the corrupted components, the device is unable to restart.
The [DRIVE LETTER] variable refers to the drive letter that is used to represent the device itself or the memory card. The actual value will depend on the choice the user makes during the installation process.

The following file is also created by the Installer, not the threat:

\system\install\Restart.S60.SIS

Displays the following message during installation:

This app can restart your phone by only clicking on the restart icon. It is suitable for S60 phones. Enjoy!!
Created By:
Symbian Corporation ©2006

[Link nur für registrierte Mitglieder sichtbar.]