Cardtrap How to fix this threat

 

This site is a free information base of anti virus knowledge which is sponsered and kept free thanks to the sponsership of UMU mobile antivirus....please visit our sponsers link to keep mobile-antivirus.org free.

CardTrap is the first known mobile malware that attempts a cross-platform infection by jumping from an infected phone to a target computer.

SymbOS/CardTrap usually arrives on phones as a SIS installation package disguised as an installer for normal applications. Some known file names used by its SIS package are the following:

Black_Symbian v0.10.sis
CamcorderPro v3.00 final.sis
AZAHARI_TERORIST_PHOTO.sis
FOTOFUN 3.5 - CRACKED.sis

Once installed, it drops installers for other known Symbian malwares such as SymbOS/Cabir, SymbOS/CommWarrior, and SymbOS/Skulls. It also drops corrupted copies of applications normally found in phones such as the following: messaging application, calendar application, photo and video applications, phonebook applications, and other phone utilities. These corrupted copies will overwrite existing non-malicious files located in the phone’s C and E (Multimedia Card) drives. Thus, after the next reboot, the overwritten applications will no longer work and the phone will be inoperable.

Aside from this SymbOS/CardTrap also drops the following files in the phone’s E drive:

Autorun.INF


Autorun.INF contains a script that will execute the Windows malwares when it’s Multimedia Card (the E drive) is inserted into a PC. SymbOS/CardTrap has been known to drop Worms, Trojans, Backdoors, and other viruses.

SymbOS/CardTrap affects phones running the Symbian S60 platform. Some phones affected by SymbOS/CardTrap include the following:

Nokia 3650, 3600
Nokia 3660, 3620
Nokia 6600
Nokia 6620
Nokia 7610
Nokia 7650
Nokia N-Gage
Panasonic X700
Sendo X
Siemens SX1

Manual Disinfection

Applications overwritten by SymbOS/CardTrap must be reinstalled or the phone needs to be re-formatted. Data stored in the phone’s C drive will be lost upon formatting.

The phone’s MMC (E drive) must be scanned by a reliable antivirus product before being inserted in a PC in order to detect and delete the dropped Windows malwares.

 

 

Home | Site Map | Contact Us | Links Directory