[SymbianOS] SymbOS.RommWar - Mobilfunk-FAQ

Hangman · 25.07.2007, 20:13

Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 19.05.2006
auch bekannt als: keine Angabe

Information:

SymbOS.RommWar.A is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a corrupted Kaspersky Symbian AntiVirus application, which will cause the compromised device to fail the next time it restarts.

When a user opens this file, the phone installer will display a dialog to warn users that the application may be coming from an untrusted source and may cause potential problems.

technische Details:

When SymbOS.RommWar.A is executed, it performs the following actions:
Displays the following message prompting the user to install the threat:

Install
KAV Mobile V 1_8

Drops the following files:

[DRIVE LETTER]\system\apps\klantivirus\b.dat
[DRIVE LETTER]\system\apps\klantivirus\engine.exe
[DRIVE LETTER]\system\apps\klantivirus\installer.exe
[DRIVE LETTER]\system\apps\klantivirus\klantivirus.aif
[DRIVE LETTER]\system\apps\klantivirus\klantivirus.app
[DRIVE LETTER]\system\apps\klantivirus\klantivirus.rsc
[DRIVE LETTER]\system\apps\klantivirus\klantivirus_caption.rsc
[DRIVE LETTER]\system\apps\klantivirus\klimages.mbm
[DRIVE LETTER]\system\apps\klantivirus\s.mid
[DRIVE LETTER]\system\help\klantivirushelp.hlp
[DRIVE LETTER]\system\libs\klsdll.dll
[DRIVE LETTER]\system\libs\klsdll.idb
c:\system\recogs\kl_antivirus.mdl

Drops the following corrupted files that cause the compromised device to fail the next time it restarts:

[DRIVE LETTER]\system\apps\klantivirus\startup.app
[DRIVE LETTER]\system\apps\klantivirus\startup.r02

Displays the following message:

End User License Agreement
Software "Kaspersky Antivirus Mobile" 2006 License AVDS-SEOP-1RIW-7EWD is a version registered by [REMOVED].

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 25.07.2007, 20:15

Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 25.05.2006
auch bekannt als: Rommwar.B [F-Secure]

Information:

SymbOS.RommWar.B is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a malfunctioning system component that causes the compromised device to fail the next time it restarts.

The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed.

technische Details:

When SymbOS.RommWar.B is executed, it performs the following actions:
Displays the following message prompting the user to install the threat:

Install
FuckyouMarrior

Drops the following file, which is a malfunctioning system component:

C:\System\recogs\WarriorMarrior.mdl

Note: This file will cause the device to fail the next time it restarts.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 25.07.2007, 20:17

Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 25.05.2006
auch bekannt als: RommWar.C [F-Secure]

Information:

SymbOS.RommWar.C is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a malfunctioning .mdl file that causes the compromised device to fail the next time it restarts.

The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed.

technische Details:

When SymbOS.RommWar.C is executed, it performs the following actions:
Displays the following message prompting the user to install the threat:

Install
DslShark_69

Drops the following file, which is a malfunctioning system component:

C:\System\recogs\dslshark_69.mdl

Note: This malfunctioning .mdl file will cause the device to fail the next time it restarts.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 25.07.2007, 20:19

Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 25.05.2006
auch bekannt als: RommWar.A [F-Secure]

Information:

SymbOS.RommWar.D is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a malfunctioning .mdl file that causes the compromised device to fail the next time it restarts.

The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed.

technische Details:

When SymbOS.RommWar.D is executed, it performs the following actions:
Displays the following message prompting the user to install the threat:

Install
Stoper by WarriorMarrior

Drops the following files:

c:\System\Recogs\RecStoper.mdl
c:\System\apps\Skins\WarriorMarrior\Startup.app
c:\System\apps\Skins\WarriorMarrior\Startup.r02

Note: The file RecStoper.mdl will cause the device to fail the next time it restarts.

[Link nur für registrierte Mitglieder sichtbar.]

25.07.2007, 20:13	#1 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 2.770 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 341 Uploads: 325 Abgegebene Danke: 47 Erhielt 484 Danke für 265 Beiträge	[SymbianOS] SymbOS.RommWar.A Risiko: sehr gering Typ: Trojanisches Pferd entdeckt am: 19.05.2006 auch bekannt als: keine Angabe Information: SymbOS.RommWar.A is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a corrupted Kaspersky Symbian AntiVirus application, which will cause the compromised device to fail the next time it restarts. When a user opens this file, the phone installer will display a dialog to warn users that the application may be coming from an untrusted source and may cause potential problems. technische Details: When SymbOS.RommWar.A is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install KAV Mobile V 1_8 Drops the following files: [DRIVE LETTER]\system\apps\klantivirus\b.dat [DRIVE LETTER]\system\apps\klantivirus\engine.exe [DRIVE LETTER]\system\apps\klantivirus\installer.exe [DRIVE LETTER]\system\apps\klantivirus\klantivirus.aif [DRIVE LETTER]\system\apps\klantivirus\klantivirus.app [DRIVE LETTER]\system\apps\klantivirus\klantivirus.rsc [DRIVE LETTER]\system\apps\klantivirus\klantivirus_caption.rsc [DRIVE LETTER]\system\apps\klantivirus\klimages.mbm [DRIVE LETTER]\system\apps\klantivirus\s.mid [DRIVE LETTER]\system\help\klantivirushelp.hlp [DRIVE LETTER]\system\libs\klsdll.dll [DRIVE LETTER]\system\libs\klsdll.idb c:\system\recogs\kl_antivirus.mdl Drops the following corrupted files that cause the compromised device to fail the next time it restarts: [DRIVE LETTER]\system\apps\klantivirus\startup.app [DRIVE LETTER]\system\apps\klantivirus\startup.r02 Displays the following message: End User License Agreement Software "Kaspersky Antivirus Mobile" 2006 License AVDS-SEOP-1RIW-7EWD is a version registered by [REMOVED]. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

25.07.2007, 20:15	#2 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 2.770 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 341 Uploads: 325 Abgegebene Danke: 47 Erhielt 484 Danke für 265 Beiträge	[SymbianOS] SymbOS.RommWar.B Risiko: sehr gering Typ: Trojanisches Pferd entdeckt am: 25.05.2006 auch bekannt als: Rommwar.B [F-Secure] Information: SymbOS.RommWar.B is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a malfunctioning system component that causes the compromised device to fail the next time it restarts. The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed. technische Details: When SymbOS.RommWar.B is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install FuckyouMarrior Drops the following file, which is a malfunctioning system component: C:\System\recogs\WarriorMarrior.mdl Note: This file will cause the device to fail the next time it restarts. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

25.07.2007, 20:17	#3 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 2.770 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 341 Uploads: 325 Abgegebene Danke: 47 Erhielt 484 Danke für 265 Beiträge	[SymbianOS] SymbOS.RommWar.C Risiko: sehr gering Typ: Trojanisches Pferd entdeckt am: 25.05.2006 auch bekannt als: RommWar.C [F-Secure] Information: SymbOS.RommWar.C is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a malfunctioning .mdl file that causes the compromised device to fail the next time it restarts. The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed. technische Details: When SymbOS.RommWar.C is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install DslShark_69 Drops the following file, which is a malfunctioning system component: C:\System\recogs\dslshark_69.mdl Note: This malfunctioning .mdl file will cause the device to fail the next time it restarts. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

25.07.2007, 20:19	#4 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 2.770 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 341 Uploads: 325 Abgegebene Danke: 47 Erhielt 484 Danke für 265 Beiträge	[SymbianOS] SymbOS.RommWar.D Risiko: sehr gering Typ: Trojanisches Pferd entdeckt am: 25.05.2006 auch bekannt als: RommWar.A [F-Secure] Information: SymbOS.RommWar.D is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. It installs a malfunctioning .mdl file that causes the compromised device to fail the next time it restarts. The phone installer displays a dialog box to warn the user that the application may be coming from an untrusted source and may cause potential problems before the .sis file is installed. technische Details: When SymbOS.RommWar.D is executed, it performs the following actions: Displays the following message prompting the user to install the threat: Install Stoper by WarriorMarrior Drops the following files: c:\System\Recogs\RecStoper.mdl c:\System\apps\Skins\WarriorMarrior\Startup.app c:\System\apps\Skins\WarriorMarrior\Startup.r02 Note: The file RecStoper.mdl will cause the device to fail the next time it restarts. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

Themen-Optionen
Druckbare Version zeigen Jemanden per E-Mail auf dieses Thema hinweisen
Ansicht
Linear-Darstellung Zur Hybrid-Darstellung wechseln Zur Baum-Darstellung wechseln

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)