Discovered: October 7, 2005
Updated: February 13, 2007 12:45:19 PM
Type: Trojan Horse
Systems Affected: EPOC
- Install a file manager program on the device.
- Enable the option to view the files in the system folder.
- Delete the following malicious files:
- C:\System\Apps\AppMngr\AppMngr.aif
- C:\System\Apps\Browser\Browser.aif
- C:\System\Apps\BtUi\BtUi.aif
- C:\System\Apps\Calendar\Calendar.aif
- C:\System\Apps\Camcorder\Camcorder.aif
- C:\System\Apps\ClockApp\ClockApp.aif
- C:\System\Apps\FREAKPhoneBook\FREAKPhoneBook.APP
- C:\System\Apps\GS\GS.aif
- C:\System\Apps\Logs\Logs.aif
- C:\System\Apps\MCE\mce.aif
- C:\System\Apps\MCE\mce.app
- C:\System\Apps\PSLN\PSLN.aif
- C:\System\Apps\PhoneBook\PhoneBook.APP
- C:\System\Apps\ProfileApp\ProfileApp.aif
- C:\System\Apps\iLoveU\flo.mdl
- C:\System\Apps\iLoveU\iLoveU.app
- C:\System\Apps\nokiafile\nokiafile.app
- C:\System\install\autoexecdaemon.SIS
- Delete the following files:
- C:\System\Apps\AppMngr\Appmngr.app
- C:\System\Apps\Browser\Browser.app
- C:\System\Apps\BtUi\BtUi.app
- C:\System\Apps\Calendar\Calendar.app
- C:\System\Apps\Camcorder\Camcorder.app
- C:\System\Apps\ClockApp\ClockApp.app
- C:\System\Apps\FREAKPhoneBook\FREAKPhoneBook.R01
- C:\System\Apps\FREAKPhoneBook\FREAKPhoneBook.R13
- C:\System\Apps\FREAKPhoneBook\FREAKPhoneBook.aif
- C:\System\Apps\FREAKPhoneBook\FREAKPhoneBook_CAPTION.R13
- C:\System\Apps\FREAKPhoneBook\FREAKPhoneBook_CAPTION.r01
- C:\System\Apps\GS\gs.app
- C:\System\Apps\Logs\Logs.app
- C:\System\Apps\MCE\MCE.R01
- C:\System\Apps\MCE\MCE.R13
- C:\System\Apps\MCE\MCE_CAPTION.R13
- C:\System\Apps\MCE\mce_CAPTION.r01
- C:\System\Apps\Menu\Menu.aif
- C:\System\Apps\Menu\Menu.app
- C:\System\Apps\PSLN\PSLN.app
- C:\System\Apps\PhoneBook\PhoneBook.R01
- C:\System\Apps\PhoneBook\PhoneBook.R13
- C:\System\Apps\PhoneBook\PhoneBook.aif
- C:\System\Apps\PhoneBook\PhoneBook_CAPTION.R13
- C:\System\Apps\PhoneBook\PhoneBook_CAPTION.r01
- C:\System\Apps\ProfileApp\profileapp.app
- C:\System\Apps\iLoveU\iLoveU.aif
- C:\System\Apps\iLoveU\iLoveU.rsc
- C:\System\Apps\iLoveU\iLoveU_CAPTION.rsC
- C:\System\Apps\nokiaapps\nokiaapps.app
- C:\System\Apps\nokiaapps\nokiaapps_CAPTION.rsC
- C:\System\Apps\nokiafile\data.cfg
- C:\System\Apps\nokiafile\img.mbm
- C:\System\Apps\nokiafile\nokiafile.aif
- C:\System\Apps\nokiafile\nokiafile.rsc
- C:\System\Apps\nokiafile\nokiafile_caption.rsc
- C:\System\Apps\pjBLUE\pjBLUE.aif
- C:\System\Apps\pjBLUE\pjBLUE.APP
- C:\System\Apps\pjBLUE\pjBLUE_CAPTION.rsC
- Exit the file manager.
Writeup By: Yana Liu
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine