Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 03. Oktober 2005
auch bekannt als:

Information:

SymbOS.Cardblock.A is a Trojan horse that affects Symbian series 60 phones.

technische Details:

SymbOS.Cardblock.A may arrive as the file instantsis.v2.1.cracked.by.binzpda.sis. It disguises itself as a cracked version of InstantSiS application.

When SymbOS.Cardblock.A is executed, it performs the following actions:
Drops the following files:

System\apps\InstantSis\ClauSis.dll
System\apps\InstantSis\InstantSis.aif
System\apps\InstantSis\InstantSis.app
System\apps\InstantSis\InstantSis.rsc
System\apps\InstantSis\InstantSis.rsc.xxx
System\apps\InstantSis\InstantSis_caption.rsc
System\apps\InstantSis\InstantSis_caption.rsc.xxx
System\apps\InstantSis\Licence.txt
System\help\InstantSis.hlp

Sets a random password to the multimedia card of the mobile device, so that the card is no longer accessible without entering the password after rebooting the phone.

Deletes following folders from the device:

C:\system\install
C:\system\data
C:\system\libs
C:\system\mail
C:\system\bootdata

[Link nur für registrierte Mitglieder sichtbar.]