SymbOS/Porndial.A
|
UMU Scan protects against this virus. |
|
Low |
Riskware |
207 |
09/04/2009 |
21/04/2009 |
What does SymbOS/Porndial.A do?
Arriving on your phone as an installer for a program called “iPornPlayer” or “iSexPlayer” this program is Riskware, which is a commercially marketed program that has capabilities that can be used illegally. Hacked versions of the program can dial hard coded telephone numbers without your knowledge incurring call charges to your bill.
SymbOS/Porndial.A arrives as a SIS installation package for an application named “iPornPlayer”. It affects phones running the Symbian S60 2nd edition.
Prior to installation, it displays an End User License Agreement (EULA) stating that the user gets immediate unlimited access to the site youth6.net and billed by calls made to an international destination. It also states that the application will allow viewing of sexually explicit material.
The user has to accept these terms for the application to be installed on the mobile phone.
Once it has been successfully installed, it then appears in the phone’s Menu as follows:
It has the capability to dial the following numbers hardcoded in FullLengthViewer.exe:
- +43820911995
- +43810522237
- +239980254
- +3598815400096
- +22650500089
- +6744449333
- +423662690232
- +227171020
- +41773111701
- +2284260203
Manual Disinfection
- Go to the device’s Application Manager and remove/uninstall applications named “iPornPlayer”.
- Scan your mobile device using UMU Scan and delete all files detected as SymbOS/Porndial.A.