Mobile Spyware - Flexispy - How to fix it

 

This site is a free information base of anti virus knowledge which is sponsered and kept free thanks to the sponsership of UMU mobile antivirus....please visit our sponsers link to keep mobile-antivirus.org free...and find out how to stay protected.

Flexispy Mobile threat
Virus Type: Trojan
Virus Severity: Low
Discovery Date: 19/02/2007

Can UMU Guard Against This?: Yes

SymbOS/Flexispy is a commercially available application named Phones that may be used for spying and/or stealing information. Upon installation, it drops the following main components:

!:\system\recogs\FSLRECOG.MDL
!:\system\recogs\FXSMON.MDL
!:\system\apps\system\phones\Fxs.app
!:\system\apps\system\phones\FXSMON.EXE
!:\system\apps\system\phones\MONITOR.DLL

(! Signifies that the files may be installed in a user define drive)

It also drops the following components:

!:\system\apps\system\phones\MONUNINS.EXE
!:\system\apps\system\phones\t4l.cfg
!:\system\apps\system\phones\Fxs_caption.rsc
!:\system\apps\system\phones\Fxs.rsc
!:\system\apps\system\phones\Fxs.aif

FSLRECOG.MDL executes Fxs.app at every start up. Fxs.app logs all activities of the affected phone. These activities include phone calls made, SMS, MMS, and emails sent, as well as GPRS traffic. All this information is then sent to a remote server where it can be viewed through the internet.

SymbOS/Flexispy affects phones running the Symbian S60 platform. Some affected phones include the following:

Nokia 3650, 3600
Nokia 3660, 3620
Nokia 6600
Nokia 6620
Nokia 7610
Nokia 7650
Nokia N-Gage
Panasonic X700
Sendo X
Siemens SX1

Manual Disinfection

Flexispy how to fix manually / To kill the running SymbOS/Flexispy process:

1. Download a third party Application Manager or used the Application Manager that comes with the phone.
2. Locate the process named Phones in the list of running applications.
3. Choose and cancel or terminate the process.

To remove the dropped components:

1. Download a third party File Explorer.
2. Locate and delete the following files:

!:\system\recogs\FSLRECOG.MDL
!:\system\recogs\FXSMON.MDL
!:\system\apps\system\phones\Fxs.app
!:\system\apps\system\phones\FXSMON.EXE
!:\system\apps\system\phones\MONITOR.DLL
!:\system\apps\system\phones\MONUNINS.EXE
!:\system\apps\system\phones\t4l.cfg
!:\system\apps\system\phones\Fxs_caption.rsc
!:\system\apps\system\phones\Fxs.rsc
!:\system\apps\system\phones\Fxs.aif

(! Signifies that the files may be installed in a user define drive)

 

Home | Site Map | Contact Us | Links Directory