Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 03.12.2005
auch bekannt als: keine Angabe

Information:

SymbOS.Hidmenu.A is a Trojan horse that drops corrupted files to the memory card of the compromised device.

technische Details:

When SymbOS.Hidmenu.A is executed, it performs the following actions:
Copies itself as the following file:

Remove_MENU_1.0.sis

Note: If a user opens this file, the device Installer will display a dialog to warn the user that the application may be coming from an untrusted source and may cause potential problems.

Displays a message prompting the user to install:

Install Hide_menu 1.0



Copies the following files to memory card of the compromised device in an attempt to disable the Symbian application menu:

E:\system\apps\FreakMenu\FREAKMENU.RSC
E:\system\apps\FreakMenu\FREAKMENU.APP
E:\system\apps\FreakMenu\FreakMenu.aif

Note: The file C:\system\install\Remove_MENU_1.0.sis is also created by the device Installer, not the Trojan.

Displays the following message:

IMPORTANT:
THIS PROGRAM INSTALLS TO YOUR MMC CARD. If you don't currently have one, exit now.



Displays the following message:

Done. REBOOT YOUR PHONE NOW! =)
This program will temporary hide your menu icon and text.
To revert to your original settings simply unistall this sis file.
more info...
I found a simple way to remove both text and the the icon by messing with FreakyIcons.
[NAME]
[EMAIL ADRESS]









Modifies the Menu screen and replaces the Menu icon with an image of an American flag.



[Link nur für registrierte Mitglieder sichtbar.]