Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Spyware Information Pages: Spyware:SymbOS/Flexispy.F
[Summary] | [Disinfection] | [Detailed Description]

Name : Spyware:SymbOS/Flexispy.F
Alias:RBackupPro, Flexispy.F
Type:Monitor
Category:Spyware
Platform:SymbOS
Author:Vervata Co Ltd

Summary
Flexispy.F is a commercial spying application written for Symbian S60 3rd Edition.

It records the details of voice call information, SMS information and contents, physical location, and sends the details to a remote server.
Back to the Top

Disinfection

Removal using Symbian application manager

If you feel you want to remove Flexispy from your device, you can do that by doing the following:
  1. Open the Application Manager (App. Mgr) from the Tools folder.
  2. Find the application named RBackupPro.
  3. Click options and select "Remove".
  4. The application will uninstall.
  5. Reboot the phone.

Verify successful uninstallation with F-Secure Mobile Anti-Virus
  1. Download F-Secure Mobile Anti-Virus from http://f-secure.mobi and activate the Anti-Virus.
  2. Scan the phone and remove any components of the malware that remain.
Back to the Top

Detailed Description
When Flexispy.F is installed on the phone it will hide from Symbian's built in process menu and it does not have any visible user interface or icon. Flexispy.F has a hidden user interface that can only be accessed using a special code known to the person who has purchased the spying application and has installed it on the phone.

When Flexispy.F is active on the device, it will record details of all voice call and SMS information and GSM location information, and then later send those details to the Flexispy server.

Flexispy.F is signed with a Symbian certificate so it can be installed even if device accepts only valid installation packages. And it's certificate has the necessary capabilities so that it can operate without Symbian OS alerting user.

Installation




Flexispy.F is installed from a standard SIS package. During installation Flexispy.F shows the dialog seen above. After installation the application will immediately go into hiding and does not show any indication to the phone user of its activity. Being very similar to Flexispy.A, Flexispy.F does not have an application icon in the phone user interface.

Flexispy.F is signed with an official Symbian signed certificate, that has been given to its developer Vervata. The certificate is given to software named RBackupPRO, which is the name that is visible in the certificate and in the uninstallation information.










F-Secure Mobile Anti-Virus for Symbian detects this spyware starting from the update build number 123.
Back to the Top



F-Secure Corporation

Last Modified: August 14, 2007