Risiko: sehr gering
Typ: Trojanisches Pferd
entdeckt am: 04.03.2008
auch bekannt als: n/a
Information:

SymbOS.Multidropper.A is a Trojan horse that runs on Symbian OS, which is the operating system used by Nokia Series 60 cellular telephones. It drops SymbOS.Commwarrior.C, SymbOS.Beselo.A, and SymbOS.Kiazha.A on to the compromised device.

technische Details:

When executed, the Trojan drops copies of SymbOS.Kiazha.A as the following files:
%DriveLettter%\system\data\appman.exe
%DriveLettter%\system\zn1314\sq.exe
%DriveLettter%\system\Programs\Netqin.exe

It drops copies of SymbOS.Commwarrior.C as the following files:
%DriveLettter%\system\bootdata\lib\cwoutcast.exe
%DriveLettter%\system\recogs\cworec.mdl

It also drops a copy of SymbOS.Beselo.A as the following file:
%DriveLettter%\system\APPS\1314\zn.exe

The Trojan creates the following malicious file to avoid detection:
%DriveLettter%\system\Programs\2.txt (Trojan Horse)

Note: This file is a modified version of the MPulze AntiCommWarrior Trojan removal tool.

It also creates the following files so that the dropped files are executed when SymbOS starts:
%DriveLettter%\system\recogs\1314.mdl
%DriveLettter%\system\recogs\appmae.mdl
%DriveLettter%\system\recogs\Netqins.mdl

The Trojan also creates the following files:
%DriveLettter%\system\data\appmab.cfg
%DriveLettter%\system\data\zn1314.db

[Link nur für registrierte Mitglieder sichtbar.]