Home / Virus Definitions
SymbOS/SMSCurse.A
|
UMU Scan protects against this virus. |
|
High |
Exploit |
200 |
23/02/2009 |
26/02/2009 |
What does SymbOS/SMSCurse do?
Using an SMS sent to your phone, this exploit stops your phone from receiving any subsequent SMS messages.
SymbOS/SMSCurse.A exploits a vulnerability in 2nd and 3rd edition Symbian devices. It prevents an exploited device from receiving any SMS messages.
An attacker can create a specially crafted SMS message from any type of phone or application capable of sending SMS.
When the crafted SMS is received by a target S60 phone it corrupts the device’s SMS Reassembly Store, thus preventing the device from receiving any subsequent SMS messages. There will be no obvious indication on the compromised device that the crafted SMS was received. The only symptom is that it will have stopped receiving messages.
The only way to undo the effects of the exploit is by a file explorer that can access protected areas of the phone and manually restoring the Reassembly Store, a third party clean utility, or a hard reset (you will loose all data on the phone’s memory).
Scanning with UMU Scan should restore a compromised device.
Manual Disinfection
- Update UMU Scan’s signature database. Make sure you have SDB 200 or onwards.
- Scan your mobile device using UMU Scan.
- Restart your device. You should then start receiving all blocked messages that have not yet expired.