SymbOS.RommWar.A - Removal

Risk Level 1: Very Low

Printer Friendly Page

Discovered: May 19, 2006
Updated: February 13, 2007 12:55:30 PM
Type: Trojan Horse
Systems Affected: Symbian OS


  1. Install a file manager program on the device.

  2. Enable the option to view the files in the system folder.

  3. Navigate to and delete the following files:

    • [DRIVE LETTER]\system\apps\klantivirus\b.dat
    • [DRIVE LETTER]\system\apps\klantivirus\engine.exe
    • [DRIVE LETTER]\system\apps\klantivirus\installer.exe
    • [DRIVE LETTER]\system\apps\klantivirus\klantivirus.aif
    • [DRIVE LETTER]\system\apps\klantivirus\klantivirus.app
    • [DRIVE LETTER]\system\apps\klantivirus\klantivirus.rsc
    • [DRIVE LETTER]\system\apps\klantivirus\klantivirus_caption.rsc
    • [DRIVE LETTER]\system\apps\klantivirus\klimages.mbm
    • [DRIVE LETTER]\system\apps\klantivirus\s.mid
    • [DRIVE LETTER]\system\help\klantivirushelp.hlp
    • [DRIVE LETTER]\system\libs\klsdll.dll
    • [DRIVE LETTER]\system\libs\klsdll.idb
    • c:\system\recogs\kl_antivirus.mdl
    • [DRIVE LETTER]\system\apps\klantivirus\startup.app
    • [DRIVE LETTER]\system\apps\klantivirus\startup.r02

  4. Exit the file manager.


Writeup By: Takayoshi Nakayama
Search by name
Example: W32.Beagle.AG@mm
Limited Time Offers! Save up to 50%
Windows Vista Security