Home / Virus Definitions
J2ME/Swapi.AU
|
UMU Scan protects against this virus. |
|
Low |
Trojan |
283 |
12/08/2010 |
16/08/2010 |
J2ME/Swapi.AU
J2ME/Swapi.AU poses as an application for mobile chat and mobile dating and arrives as a JAR installation package by an application named “registration”. This leads you to believe that you are registering on a mobile chat or dating website, however you are not.
It affects all devices that support J2ME or Java Midlet execution.
Upon installation, it displays the following message, where the Supplier of the application is registered under ‘XXX’.
It then appears in the phone’s Menu as follows:
It drops the following components:
a.class
SmsSend.class
SmsSend.class handles the SMS sending functionalities for this Trojan.
It then prompts the following message that will allow it to send an SMS to 7122. The compromised user may be charged at premium rates for these messages.
Manual Disinfection
- Go to the device’s Application Manager and remove/uninstall applications named “registration”.
- Scan your mobile device using UMU Scan and delete all files detected as J2ME/Swapi.AU