SymbOS/Keaf.A - Released Nov 27, 2006
|
Alias/esSymb/Keaf-A, SymbOS/Feak.A |
| . |
Visible Symptoms. |
Detailed AnalysisIt is a Symbian virus, packed in .sis format.
This virus may come from an URL link in a SMS message. If you select to download, it will install the following files on the local mobile phone:
- !\system\apps\feakk.exe
- !\system\recogs\feakk.mdl
Once the mobile phone is rebooted, it will enumerate the contacts database of the infected mobile phone and send an SMS message to each of the contacts. The SMS contains the following text:
hey, check this link out
http: //www.{REMOVED}.edu/%7efeakk/feakk.zip
bye!
|
|
Recommended Action
Check the main screen using the web interface to ensure the latest AV/NIDS database has been downloaded and installed. If required, enable the "Allow Push Update" option
|
