This application requires Javascript for optimal performance.

SymbOS/Fakee.A!tr - Released Mar 09, 2007 - Last Updated Jul 13, 2007

Alias/es

SymbOS/Feak.A!tr, SYMBOS_FEAKS.A, SymbOS/Feakks.B trojan, SymbOS/Feak.B

Detection Availability

Active DatabaseExtended Database
FortiGate
low
high
FortiClient
FortiMail N/A

Visible Symptoms

  • SMS messages are sent to all existing contacts from the infected mobile phone.
  • Detailed Analysis

  • This malware may arrive as a downloaded file from a URL which is contained in an SMS message.

  • Upon execution, it drops the following files:
    • !\system\apps\feakk.exe
    • !\system\recogs\feakk.mdl
    Both of them are detected as SymbOS/Fakee.A!tr by Fortinet.

  • Searches the list of contacts of the affected phone and then sends an SMS message to each of them. The SMS message is as follows:
    hey check this link out
    http://www.cs.{REMOVED}.edu/%7efeakk/feakk.zip
    bye
    
  • Recommended Action

  • Delete all the virus files using a file manager program or an AV software for mobile devices.

  • Reference: ID - 339578