Disable how to fix this threat....?

 

This site is a free information base of anti virus knowledge which is sponsered and kept free thanks to the sponsership of UMU mobile antivirus....please visit our sponsers link to keep mobile-antivirus.org free.

Disable is a highly destructive mobile Trojan program aimed at disabling normal mobile applications by dropping corrupted copies of the application’s files.

It may arrive on a phone disguised as a SIS installer for normal applications or theme packages. It may even display misleading messages such as the following:

IMPORTANT:

"Remove_MENU_1.0.sis"hasbeenplacedinyourphoneimagegallery.
Installittohideyour"menu"textanddefaulticon.

"Szilvia_op_logo.jpg"willbeplacedinyourPhoneimagegallery.
Useitasyouroperatorlogo!=)

Holaamigos!
Here's a dreamy theme just for you! The theme was designed to emulate space and freedom. I felt caged in by the other themes that "box" me in with solid verical and horizontal imagery.

Due credit goes to the creator of the original image.
A Shout out to Szilvia! Supgirl?!;)

email:mumu311@yahoo.com
WWW:http://www.msu.edu/~vanumuaj/

oh,btw - AJAY IS GOD!
;)peaceout.

AjayVanumu*


When the malicious SIS installer is executed, it overwrite normal application files in the device’s C and E drives with damaged copies. Some of the popular applications it disables in this way include the following:

E:\system\apps\FreakMenu\FREAKMENU.RSC
E:\system\apps\FreakMenu\FREAKMENU.APP
E:\system\apps\FreakMenu\FreakMenu.aif

C:\system\apps\RINUMenu\RINUMenu.APP
C:\system\apps\RINUMenu\RINUMenu.RSC
C:\system\apps\RINUMenu\RINUMenu_caption.rsc

!:\system\apps\A-RAGHU.txt
!:\system\apps\AD7650\AD7650.App
!:\system\apps\AnswRec\AnswRec.App
!:\system\apps\BlackList\BlackList.App
!:\system\apps\BlueJackX\BlueJackX.App
!:\system\apps\callcheater\callcheater.app
!:\system\apps\CallManager\CallManager.App
!:\system\apps\Camcoder\Camcoder.App
!:\system\apps\camerafx\CameraFX.App
!:\system\apps\ETICamcorder\ETICamcorder.App
!:\system\apps\ETIMovieAlbum\ETIMovieAlbum.App
!:\system\apps\ETIPlayer\ETIPlayer.App
!:\system\apps\extendedrecorder\extendedrecorder.App
!:\system\apps\FaceWarp\FaceWarp.App
!:\system\apps\FExplorer\FExplorer.App
!:\system\apps\FSCaller\FSCaller.App
!:\system\apps\Hair\Hair.App
!:\system\apps\HantroCP\HantroCP.App
!:\system\apps\irremote\irRemote.App
!:\system\apps\Jelly\Jelly.App
!:\system\apps\KPCaMain\KPCaMain.App
!:\system\apps\Launcher\Launcher.app
!:\system\apps\logoMan\logoMan.app
!:\system\apps\MIDIED\MIDIED.App
!:\system\apps\mmp\mmp.App
!:\system\apps\Mp3Go\Mp3Go.App
!:\system\apps\Mp3Player\Mp3Player.App
!:\system\apps\photoacute\photoacute.App
!:\system\apps\PhotoEditor\PhotoEditor.app
!:\system\apps\Photographer\Photographer.app
!:\system\apps\PhotoSafe\PhotoSafe.App
!:\system\apps\PhotoSMS\PhotoSMS.App
!:\system\apps\PVPlayer\PVPlayer.App
!:\system\apps\RAGHU.txt
!:\system\apps\RAGHU\RAGHU.app
!:\system\apps\RAGHUMenu\RAGHUMENU.APP
!:\system\apps\RAGHUMenu\RAGHUMENU.RSC
!:\system\apps\RAGHUMenu\RAGHUMenu_caption.rsc
!:\system\apps\RallyProContest\RallyProContest.App
!:\system\apps\realplayer\realplayer.App
!:\system\apps\RingMaster\RingMaster.App
!:\system\apps\SmartAnswer\SmartAnswer.App
!:\system\apps\SmartMovie\SmartMovie.App
!:\system\apps\SmsMachine\SmsMachine.App
!:\system\apps\Sounder\Sounder.App
!:\system\apps\Sounder\Sounder.App
!:\system\apps\sSaver\sSaver.App
!:\system\apps\SystemExplorer\SystemExplorer.App
!:\system\apps\UltraMP3\UltraMP3.App
!:\system\apps\UVSMStyle\UVSMStyle.App
!:\system\apps\WILDSKIN\WILDSKIN.App

*where ! represents a drive specified by the user during installation

Some variants also drop JPG images in the phone that may be displayed during insallation.

SymbOS/Disable affects phones running the Symbian S60 platform. Some affected phones include the following:

Nokia 3650, 3600
Nokia 3660, 3620
Nokia 6600
Nokia 6620
Nokia 7610
Nokia 7650
Nokia N-Gage
Panasonic X700
Sendo X
Siemens SX1

Other Details

SymbOS/Disable may also display the following messages:

MY NAME IS -----R A G H U-----


FROM SURAT/GUJARAT/INDIA/ASIA/WORLD/HEVEN/


U LIKE THIS VIRUS?

HA.......HAHA............HAHAHA

WARNING-NEVER INSTALL RAGHU.SIS ITS HARMFULL FOR YOUR MOBILE
==============================

----R A G H U-C R A C K----

VIRUS BORN IN SURAT(GUJRAT/INDIA/ASIA).

THE NAME OF THIS VIRUS IS RAGHU....
U KNOW WHY....????????

BECAUSE I LIKE VASTAV MOVIE AND SANJU BABA.

U LIKE THIS VIRUS?


SO MANY SOFTWARE CRACKS AND VIRUS AVAILABLE SOON....

RAGHU NAM HE RAGHU...

(MUSAFIR) ATE HE VIRUS DEKE JATE HE (VASTAV) ME VO VIRUS (SADAK) KE KISI GALLE PE BETHNE
WALE EK SANJU BABA KE FRIEND NE BANAYA HE JISKA (NAAM)......????(BHAI----NAAM TO HUM NAHI BATAENGE APNA..)



I LOVE SURAT----NO ONE CITY HAS THE LOVEBIRD"S LIKE ME N OTHER SURTI"S........



FROM --- (-) RAGHU & RINU (-)


PRODUCTS....

1.RAGHU.SIS (VIRUS)
2.RAGHU_R.SIS (VIRUS)
3.RAGHU_C.SIS (VIRUS)
4.RAGHU_MP3 PLAYER.SIS (TWO IN ONE MP3 PLAYER)
==============================

Manual Disinfection

To disinfect a compromised device, it is necessary to reinstall all overwritten applications. The SymbOS/Disable SIS installer must then be deleted. If this does not restore the phone, a formatting the phone may be necessary. All data saved in the C drive will be lost during a format.

Home | Site Map | Contact Us | Links Directory