UMU Mobile Security Banner
SymbOS/HatiHati.A
Green Tick UMU Scan protects against this virus.
Threat Level:
Low
Type:
Worm
SDB Version:
144
SDB Release Date:
06/02/2008
Description Date:
15/05/2008

SymbOS/HatiHati.A is the detection for the beta version of a commercially available version of an anti-theft Symbian application, Guardian 0.95beta. A bug in the program caused it to exhibit Worm-like behaviors. The bug has since been corrected in later versions of Guardian. 

Upon installation, the application drops an extra copy of its files in the phone’s MMC. When the affected MMC is inserted into a new device, it automatically installs and runs itself in the new device without the owner’s permission. The application then attempts to send SMS messages continuously to a predefined number. 

Manual Disinfection 

  1. Scan your mobile device using UMU Scan and delete all files detected as SymbOS/HatiHati.A.
  2. Reboot your device to kill malware residue processes.
  3. Download a third party File Explorer.
  4. Locate and delete the following files and folders if they exist: 
C:\system\apps\Guardian
C:\system\recogs\1020DC95.mdl
E:\system\apps\Guardian
E:\system\recogs\1020DC95.mdl
 
  1. Update to the latest version of Guardian.
Virus Definitions

List of virus definitions
Report a new virus/spyware