Discovered: July 03, 2009
Updated: July 03, 2009 8:36:27 PM
Infection Length: Variable
Systems Affected: Java

Java.Boxer is a Trojan horse that sends SMS messages.

Antivirus Protection Dates

  • Initial Rapid Release version July 03, 2009 revision 017
  • Latest Rapid Release version April 27, 2018 revision 007
  • Initial Daily Certified version July 03, 2009 revision 023
  • Latest Daily Certified version April 27, 2018 revision 017
  • Initial Weekly Certified release date July 08, 2009

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Writeup By: Mario BallanoBarcena

Discovered: July 03, 2009
Updated: July 03, 2009 8:36:27 PM
Infection Length: Variable
Systems Affected: Java

The Trojan arrives as a java application that requires the user to install manually and run.

Once executed, the Trojan accesses the following file which carries a list of premium rate phone numbers inside its Java Archive:
load.bin

It loads and decrypts the numbers and the text to be sent and proceeds to send SMS text messages to premium rate phone numbers.

The user may be asked to grant text sending permissions to the application, depending on the platform policies of the mobile device.

Writeup By: Mario BallanoBarcena

Discovered: July 03, 2009
Updated: July 03, 2009 8:36:27 PM
Infection Length: Variable
Systems Affected: Java

  1. Install a file manager program on the device.
  2. Enable the option to view the files in the system folder.
  3. Delete the following file:

    load.bin

  4. Exit the file manager.

Writeup By: Mario BallanoBarcena