26 January 2006

F-secure found three new Cardtrap versions!

photo by F-secure

are Symbian SIS file trojans that disable several Symbian built in applications, try to damage several 3rd party applications and install Windows malware to the memory card.

Cardtrap.S, Cardtrap.T and Cardtrap.U also install a damaged font file from Fontal.A, which crashes the device when rebooted. If you have any of these trojans installed, it is important not to reboot your device before the disinfection.

Cardtrap.S is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Cardtrap.S also installs damaged font file from Fontal.A, which crashes the device when rebooted. So if your system is installed with Cardtrap.S it is important not to reboot your device before disinfection.

The installation message and files that Cardtrap.S drops to the memory card, contains several references to F-Secure. But F-Secure has nothing to do with creation of Cardtrap or any other malware.

Spreading in “Anti Virus from F-Secure.sis”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_s.shtml

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_t.shtml

Cardtrap.U is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Cardtrap.U also installs damaged font file from Fontal.A, which crashes the device when rebooted. So if your system is installed with ardtrap.U it is important not to reboot your device before disinfection.

Spreading in "Image Manager - BiNPDa.sis”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_u.shtml

Cardtrap.W is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Cardtrap.W copies broken copy of Windows based spyware software on device memory card, but this spyware is missing components and cannot infect PC even if user would try to execute it.

Spreading in “SpyCall 2006.SIS”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_w.shtml

Cardtrap.V is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Spreading in “BattleField 2 - GAMELOFT.sis”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_v.shtml

Cardtrap.X is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Spreading in “Adobe Reader 3 - Cracked.sis”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_x.shtml

Cardtrap.Y is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Spreading in “Symantec Mobile Firewall.sis”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_y.shtml

Cardtrap.Z is a Symbian SIS file trojan that disables several Symbian built in applications, tries to damage some 3rd party applications and installs Windows malware to the memory card.

Spreading in “SeleQ 1.7 - Cracked TNT.sis”

For more information, please see:
http://www.f-secure.com/v-descs/cardtrap_z.shtml