This application requires Javascript for optimal performance.

SymbOS/Mrex.A!tr - Released Apr 10, 2007 - Last Updated Nov 08, 2010

Alias/es

Trojan.SymbOS.Mrex.a (KAV)

Detection Availability

Active DatabaseExtended Database
FortiGate
low
high
FortiClient
FortiMail N/A

Visible Symptoms

Abnormal colours on the mobile phone.

Detailed Analysis

SymbOS/Mrex.A!tr is a trojan for mobile phones running Symbian OS prior to version 9. It typically poses as a (fake) anti-virus program, but installs a corrupted colour palette on the phone, hence making it unusable.

The corrupted palette is written to c:\system\data\colorscm.dat.
.

Recommended Action

    FortiGate Systems

  • Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.

    FortiClient Systems

  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Reference: ID - 347594