SymbOS/HatiHati.A
|
|
UMU Scan protects against this virus. |
|
Low |
Worm |
144 |
06/02/2008 |
15/05/2008 |
SymbOS/HatiHati.A is the detection for the beta version of a commercially available version of an anti-theft Symbian application, Guardian 0.95beta. A bug in the program caused it to exhibit Worm-like behaviors. The bug has since been corrected in later versions of Guardian.
Upon installation, the application drops an extra copy of its files in the phone’s MMC. When the affected MMC is inserted into a new device, it automatically installs and runs itself in the new device without the owner’s permission. The application then attempts to send SMS messages continuously to a predefined number.
Manual Disinfection
- Scan your mobile device using UMU Scan and delete all files detected as SymbOS/HatiHati.A.
- Reboot your device to kill malware residue processes.
- Download a third party File Explorer.
- Locate and delete the following files and folders if they exist:
C:\system\apps\Guardian
C:\system\recogs\1020DC95.mdl
E:\system\apps\Guardian
E:\system\recogs\1020DC95.mdl
- Update to the latest version of Guardian.