Home / Virus Definitions
SymbOS/HatiHati.A
|
UMU Scan protects against this virus. |
|
Low |
Worm |
144 |
06/02/2008 |
15/05/2008 |
What does this virus do?
Arriving on your phone as the Beta version of a commercially available anti theft program for Symbian handsets, a bug in the program causes it to duplicate itself to the memory card of your device and continuously send SMS messages to a predefined number at your cost. When an infected memory card is inserted into a new phone, the program installs and runs without your permission.
SymbOS/HatiHati.A is the detection for the beta version of a commercially available version of an anti-theft Symbian application. A bug in the program caused it to exhibit Worm-like behaviors; the bug has since been corrected in later versions.
It displays a description of the application prior to installation:
It then appears in the phone’s Menu as follows:
Upon installation, the application drops an extra copy of its files in the phone’s MMC.
When the affected MMC is inserted into a new device, it automatically installs and runs itself in the new device without the owner’s permission. The application then attempts to send SMS messages continuously to a predefined number.
Manual Disinfection
- Scan your mobile device using UMU Scan and delete all files detected as SymbOS/HatiHati.A.
- Reboot your device to kill malware residue processes.
- Download a third party File Explorer.
- Locate and delete the following files and folders if they exist:
C:\system\apps\Guardian
C:\system\recogs\1020DC95.mdl
E:\system\apps\Guardian
E:\system\recogs\1020DC95.mdl