|
| |
|
23.07.2007, 17:45
|
#11 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
 Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.L
Risiko: sehr gering Typ: Trojanisches Pferd entdeckt am: 23.03.2006 auch bekannt als: Cdropper.L [F-Secure] Information: SymbOS.Cdropper.L is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops a SymbOS.Cabir variant onto the compromised device. SymbOS.Cdropper.L reportedly arrives as Mario-.sis. If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.Cdropper.L is executed, it performs the following actions: Display the following message prompting the user to install the threat: Install Mario- Displays the following message to the user: This installer was created by [REMOVED] [Link nur für registrierte Mitglieder sichtbar.] [REMOVED].com Drops the following files: c:\System\Apps\Mario-\flo.mdl c:\System\Apps\Mario-\Mario-.aif c:\System\Apps\Mario-\Mario-.app, which is a SymbOS.Cabir variant c:\System\Apps\Mario-\Mario-.rsc The following file is also created by the device Installer, not the threat: \system\install\Mario-.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
23.07.2007, 17:46
|
#12 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.M
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 30.12.2004 auch bekannt als: Cdropper.M [F-Secure] Information: SymbOS.Cdropper.M is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops a copy of SymbOS.Cabir.J to the compromised device. SymbOS.Cdropper.M reportedly arrives as caribe.sis. If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.Cdropper.M is executed, it performs the following actions: Display the following message prompting the user to install the threat: Install caribe Displays the following message to the user: This installer was created with MakeSis 0.9 by Gip. For info: [Link nur für registrierte Mitglieder sichtbar.] Drops the following files: [DRIVE LETTER]:\system\apps\caribe\caribe.app (A copy of SymbOS.Cabir.J) [DRIVE LETTER]:\system\apps\caribe\caribe.rsc [DRIVE LETTER]:\system\apps\caribe\flo.mdl (A copy of SymbOS.Cabir.J) The following file is also created by the device Installer, not the threat: \system\install\caribe.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
23.07.2007, 17:48
|
#13 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.N
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 06.04.2006 auch bekannt als: keine Angabe Information: SymbOS.Cdropper.N is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops a copy of SymbOS.Cabir to the compromised device. SymbOS.Cdropper.N reportedly arrives as EzBoot.sis. If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.Cdropper.N is executed, it performs the following functions: Displays the following message prompting the user to install the threat: Install EzBoot Drops the following files: [DRIVE LETTER]:\system\apps\EzBoot\EZBoot.app (A copy of SymbOS.Cabir) [DRIVE LETTER]:\system\apps\EzBoot\EZBoot.rsc [DRIVE LETTER]:\system\apps\EzBoot\ezboot.mdl (A copy of SymbOS.Cabir) [DRIVE LETTER]:\system\programs\EZBoot\EZBootsrv.exe (A copy of SymbOS.Cabir) [DRIVE LETTER]:\system\recogs\ezrecog.mdl (A copy of SymbOS.Cabir.V) The following file is also created by the device Installer, not the Trojan itself: \system\install\EzBoot.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
|
|
23.07.2007, 17:49
|
#14 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.O
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 30.06.2006 auch bekannt als: Information: SymbOS.Cdropper.O is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops copies of SymbOS.Cabir.B and SymbOS.Cabir onto the compromised device. The Trojan Horse reportedly arrives as the file UltraMP3-skin.sis. When a user opens this file , the phone installer will display a dialog to warn users that the application may be coming from an untrusted source and may cause potential problems. technische Details: Once SymbOS.Cdropper.O is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install UltraMP3-skin Displays the following message to the user: This installer was created with MakeSis 0.9 by Gip. For info: [Link nur für registrierte Mitglieder sichtbar.] Once executed, the Trojan Horse drops the following files: [DRIVE LETTER]:\System\Apps\Caribe\Caribe.aif [DRIVE LETTER]:\System\Apps\Caribe\Caribe.app (A copy of SymbOS.Cabir.B) [DRIVE LETTER]:\System\Apps\Caribe\Caribe.rsc [DRIVE LETTER]:\System\Apps\Caribe\Caribe\Caribe.aif [DRIVE LETTER]:\System\Apps\Caribe\Caribe\Caribe.app (A copy of SymbOS.Cabir.B) [DRIVE LETTER]:\System\Apps\Caribe\Caribe\Caribe.rsc [DRIVE LETTER]:\System\Apps\Caribe\Caribe\Caribe_CAPTION.rsC [DRIVE LETTER]:\System\Apps\Caribe\Caribe\flo.mdl (A copy of SymbOS.Cabir.B) [DRIVE LETTER]:\System\Apps\Caribe\Caribe_CAPTION.rsC [DRIVE LETTER]:\System\Apps\Caribe\flo.mdl (A copy of SymbOS.Cabir) [DRIVE LETTER]:\System\Apps\Smartmovie\flo.mdl (A copy of SymbOS.Cabir) [DRIVE LETTER]:\System\Apps\Smartmovie\Smartmovie.aif [DRIVE LETTER]:\System\Apps\Smartmovie\Smartmovie.app (A copy of SymbOS.Cabir.B) [DRIVE LETTER]:\System\Apps\Smartmovie\Smartmovie.rsc [DRIVE LETTER]:\System\Apps\Smartmovie\Smartmovie_CAPTION.rsC [DRIVE LETTER]:\System\Apps\Ultramp3\skins\CrystalizedMP3.mp3ski n The following file is also created by the device Installer, not the Trojan Horse itself: \system\install\UltraMP3-skin.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
23.07.2007, 17:51
|
#15 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.P
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 30.06.2006 auch bekannt als: Information: SymbOS.Cdropper.P is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops variants of the SymbOS.Cabir worm onto the compromised device. technische Details: Once executed, SymbOS.Cdropper.P performs the following actions: Displays the following message, prompting the user to install the threat: Install UltraMP3v4.0by9546 Displays the following message: This installer was created with MakeSis 0.9 by Gip. For info: [Link nur für registrierte Mitglieder sichtbar.] Drops the following files: [DRIVE LETTER]:\images\images01.SIS (A copy of SymbOS.Cabir.D) [DRIVE LETTER]:\sounds\digital\002.SIS (A copy of SymbOS.Cabir.D) [DRIVE LETTER]:\system\apps\BtUi\BTUI.aif [DRIVE LETTER]:\system\apps\BtUi\BTUI.app [DRIVE LETTER]:\system\apps\BtUi\BTUI.R01 [DRIVE LETTER]:\system\apps\BtUi\BTUI.R13 [DRIVE LETTER]:\system\apps\BtUi\BTUI_CAPTION.R13 [DRIVE LETTER]:\system\apps\BtUi\BTUI_CAPTION.r01 [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.aif [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.rsc [DRIVE LETTER]:\system\apps\FExplorer\FExplorer_CAPTION.rsC [DRIVE LETTER]:\system\apps\FExplorer\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\File\File.aif [DRIVE LETTER]:\system\apps\File\File.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\File\File.rsc [DRIVE LETTER]:\system\apps\File\File_CAPTION.rsC [DRIVE LETTER]:\system\apps\File\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.aif [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.app [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.R01 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.R13 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi_CAPTION.R13 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi_CAPTION.r01 [DRIVE LETTER]:\system\apps\SmartFileMan\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.aif [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.rsc [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan_CAPTION.rs C [DRIVE LETTER]:\system\apps\SmartMovie\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.aif [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.rsc [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie_CAPTION.rsC [DRIVE LETTER]:\system\apps\SystemExplorer\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.aif [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.rsc [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer_CAPTIO N.rsC [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].aif [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].rsc [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN]_CAPTION.rsC [DRIVE LETTER]:\system\apps\[YUAN]\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\install\autoexecdaemon.SIS (A copy of SymbOS.Cabir.C) [DRIVE LETTER]:\system\install\comcoder.SIS (A copy of SymbOS.Cabir.B) [DRIVE LETTER]:\system\recogs\flo.mdl (A copy of SymbOS.Cabir.E) The following file is also created by the device Installer, not the Trojan itself: \system\install\UltraMP3v4.0by9546.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
23.07.2007, 17:54
|
#16 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.Q
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 02.07.2006 auch bekannt als: keine Angabe Information: SymbOS.Cdropper.Q is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops variants of SymbOS.Cabir onto the compromised device. SymbOS.Cdropper.Q reportedly arrives as FSCaller.v3.0by9546.sis. If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.Cdropper.Q is executed, it perfroms the following actions: Displays the following message prompting the user to install the threat: Install FSCaller.v3.0by9546 Displays the following message to the user: This installer was created with MakeSis 0.9 by [REMOVED]. For info: [REMOVED] Drops the following files: [DRIVE LETTER]:\images\images01.SIS (Detected as SymbOS.Cabir.D) [DRIVE LETTER]:\sounds\digital\002.SIS (Detected as SymbOS.Cabir.D) [DRIVE LETTER]:\system\apps\BtUi\BTUI.aif [DRIVE LETTER]:\system\apps\BtUi\BTUI.app [DRIVE LETTER]:\system\apps\BtUi\BTUI.R01 [DRIVE LETTER]:\system\apps\BtUi\BTUI.R13 [DRIVE LETTER]:\system\apps\BtUi\BTUI_CAPTION.R13 [DRIVE LETTER]:\system\apps\BtUi\BTUI_CAPTION.r01 [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.aif [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.app (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.rsc [DRIVE LETTER]:\system\apps\FExplorer\FExplorer_CAPTION.rsC [DRIVE LETTER]:\system\apps\FExplorer\flo.mdl (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\File\File.aif [DRIVE LETTER]:\system\apps\File\File.app (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\File\File.rsc [DRIVE LETTER]:\system\apps\File\File_CAPTION.rsC [DRIVE LETTER]:\system\apps\File\flo.mdl (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.aif [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.app [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.R01 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.R13 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi_CAPTION.R13 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi_CAPTION.r01 [DRIVE LETTER]:\system\apps\SmartFileMan\flo.mdl (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.aif [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.app (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.rsc [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan_CAPTION.rs C [DRIVE LETTER]:\system\apps\SmartMovie\flo.mdl (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.aif [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.app (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.rsc [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie_CAPTION.rsC [DRIVE LETTER]:\system\apps\SystemExplorer\flo.mdl (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.aif [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.app (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.rsc [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer_CAPTIO N.rsC [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].aif [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].app (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].rsc [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN]_CAPTION.rsC [DRIVE LETTER]:\system\apps\[YUAN]\flo.mdl (Detected as SymbOS.Cabir.E) [DRIVE LETTER]:\system\install\autoexecdaemon.SIS (Detected as SymbOS.Cabir.C) [DRIVE LETTER]:\system\install\comcoder.SIS (Detected as SymbOS.Cabir.B) [DRIVE LETTER]:\system\recogs\flo.mdl (Detected as SymbOS.Cabir.E) The following file is also created by the device Installer, not the threat: \system\install\FSCaller.v3.0by9546.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
|
|
23.07.2007, 17:58
|
#17 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.R
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 30.06.2006 auch bekannt als: keine Angabe Information: SymbOS.Cdropper.R is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops a copy of SymbOS.Cabir onto the compromised device. SymbOS.Cdropper.R reportedly arrives as Pinball S60.sis. If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.Cdropper.R is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install Pinball S60 Displays the following message to the user: Make by [REMOVED] for Nokia Series S60. [REMOVED] Drops the following files: [DRIVE LETTER]:\system\apps\LESLIEDATA\LESLIE\REBECA.MDL [DRIVE LETTER]:\system\apps\LESLIEDATA\LESLIE\LESLIE.rSC [DRIVE LETTER]:\system\apps\LESLIEDATA\LESLIE\LESLIE.APP (Detected as SymbOS.Cabir) [DRIVE LETTER]:\system\LESLIEDATA\LESLIE\REBECA.MDL [DRIVE LETTER]:\system\LESLIEDATA\LESLIE\LESLIE.rSC [DRIVE LETTER]:\system\LESLIEDATA\LESLIE\LESLIE.APP (Detected as SymbOS.Cabir) [DRIVE LETTER]:\system\recogs\nokiasystem.MDL [DRIVE LETTER]:\system\recogs\REBECA.MDL The following file is also created by the device Installer, not the threat: [DRIVE LETTER]:\system\install\Pinball S60.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
|
23.07.2007, 18:00
|
#18 (Permalink) |
|
Administrator
Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone
Avatare sind nur für MFF-Mitglieder sichtbar!
Bike Mania Champion!Registriert seit: 17.04.2006
Ort: Erfurt
Beiträge: 3.045 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt.
Downloads: 266
Uploads: 289
Abgegebene Danke: 35
Erhielt 306 Danke für 188 Beiträge
|
[SymbianOS] SymbOS.Cdropper.S
Risiko: sehr gering
Typ: Trojanisches Pferd entdeckt am: 30.06.2006 auch bekannt als: Information: SymbOS.Cdropper.S is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It drops variants of SymbOS.Cabir onto the compromised device. SymbOS.Cdropper.S reportedly arrives as OperatorLogo2.0-by9546.sis. If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.Cdropper.S is executed, it perfroms the following actions: Displays the following message prompting the user to install the threat: Install OperatorLogo2.0-by9546 Displays the following message to the user: This installer was created with MakeSis 0.9 by [REMOVED]. For info: [REMOVED] Drops the following files: [DRIVE LETTER]:\images\images01.SIS (A copy of SymbOS.Cabir.D) [DRIVE LETTER]:\sounds\digital\002.SIS (A copy of SymbOS.Cabir.D) [DRIVE LETTER]:\system\apps\BtUi\BTUI.aif [DRIVE LETTER]:\system\apps\BtUi\BTUI.app [DRIVE LETTER]:\system\apps\BtUi\BTUI.R01 [DRIVE LETTER]:\system\apps\BtUi\BTUI.R13 [DRIVE LETTER]:\system\apps\BtUi\BTUI_CAPTION.R13 [DRIVE LETTER]:\system\apps\BtUi\BTUI_CAPTION.r01 [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.aif [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\FExplorer\FExplorer.rsc [DRIVE LETTER]:\system\apps\FExplorer\FExplorer_CAPTION.rsC [DRIVE LETTER]:\system\apps\FExplorer\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\File\File.aif [DRIVE LETTER]:\system\apps\File\File.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\File\File.rsc [DRIVE LETTER]:\system\apps\File\File_CAPTION.rsC [DRIVE LETTER]:\system\apps\File\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.aif [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.app [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.R01 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi.R13 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi_CAPTION.R13 [DRIVE LETTER]:\system\apps\FREAKBtUi\FREAKBtUi_CAPTION.r01 [DRIVE LETTER]:\system\apps\SmartFileMan\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.aif [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan.rsc [DRIVE LETTER]:\system\apps\SmartFileMan\SmartFileMan_CAPTION.rs C [DRIVE LETTER]:\system\apps\SmartMovie\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.aif [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie.rsc [DRIVE LETTER]:\system\apps\SmartMovie\SmartMovie_CAPTION.rsC [DRIVE LETTER]:\system\apps\SystemExplorer\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.aif [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer.rsc [DRIVE LETTER]:\system\apps\SystemExplorer\SystemExplorer_CAPTIO N.rsC [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].aif [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].app (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN].rsc [DRIVE LETTER]:\system\apps\[YUAN]\[YUAN]_CAPTION.rsC [DRIVE LETTER]:\system\apps\[YUAN]\flo.mdl (A copy of SymbOS.Cabir.E) [DRIVE LETTER]:\system\install\autoexecdaemon.SIS (A copy of SymbOS.Cabir.C) [DRIVE LETTER]:\system\install\comcoder.SIS (A copy of SymbOS.Cabir.B) [DRIVE LETTER]:\system\recogs\flo.mdl (A copy of SymbOS.Cabir.E) The following file is also created by the device Installer, not the threat: [DRIVE LETTER]:\system\install\OperatorLogo2.0-by9546.sis [Link nur für registrierte Mitglieder sichtbar.]
__________________
lesen - denken - posten |
|
|
 |
| Lesezeichen |
| Stichworte |
| symbianos, symboscdropper |
| Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1) | |
| Themen-Optionen | |
| Ansicht | |
|
|
![[SymbianOS] SymbOS.Cdropper](http://www.mobilfunk-faq.info/iconimages/verzeichnis-aktueller-mobiltelefonviren/symbianos-symbos-cdropper_ltr.gif)
Linear-Darstellung
