Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 17.04.2005
auch bekannt als: Hobbes.A[F-Secure], SymbOS/Hobbes.a[McAfee]

Information:

SymbOS.Hobbes.A is a Symbian Trojan horse that attempts to disable all applications on Series 60 platforms.

technische Details:

SymbOS.Hobbes.A arrives in a file named Symantec Anti-Virus.sis, in an attempt to trick users into believing that it is a legitimate security product.

When SymbOS.Hobbes.A is executed, it performs the following actions:
Installs the following files, which will disable all applications when the device is restarted:

\apps\FExplorer\FExplorer.aif
\apps\FExplorer\FExplorer.app
\apps\FExplorer\FExplorer.mbm
\apps\FExplorer\FExplorer.rsc
\apps\FExplorer\FExplorer_CAPTION.rsC
\apps\FExplorer\flo.mdl (A copy of SymbOS.Cabir.Q)
\system\recogs\jjlas.mdl
\system\recogs\RecAppForge.mdl
\system\recogs\UltraMP3Rec.mdl
\system\recogs\recAutoExec.mdl

Hides any new applications that a user attempts to install on the compromised device.

Disables all applications once the device is restarted

Prevents the "apps" button from accessing the application selector or the "running apps" list.

[Link nur für registrierte Mitglieder sichtbar.]