Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Spyware Information Pages: Spyware:WinCE/BopSmiley.A
[Summary] | [Disinfection] | [Detailed Description] | [Detection]

Name : Spyware:WinCE/BopSmiley.A
Type:Monitor
Category:Spyware
Platform:WinCE

Summary
BopSmiley is a spying application for mobile phones using Windows PocketPC or Windows Smartphone operating systems.

When the application is active on a phone, it records both voice call and SMS information and sends the details to a third party server.
Back to the Top

Disinfection

Disinfecting using F-Secure Mobile Anti-Virus
  1. Download F-Secure Mobile Anti-Virus from http://f-secure.mobi
    and activate the Anti-Virus.
  2. Scan the phone and remove any components of the malware.
  3. Reboot the phone to remove memory resident components.
Back to the Top

Detailed Description
Installation

BopSmiley.A is installed in a standard CAB package. After installation, the application needs to be started with a File Manager in order to insert required credentials that access the third party server. When the credential information is in place, the application can be set to a hidden mode so that during normal phone use BopSmiley.A will not be visible to the user.

Whomever wishes to track the use of a phone with this application needs to have physical access to the phone. No phone is accidentally monitored by this spying application.

User Interface

The user interface of BopSmiley.A is only accessible during the initialization phase.

Recording the Victim's Communication

BopSmiley.A records both voice call and SMS information and sends the details to a third party server. From the third party site, the information can be accessed through a web browser.

Below is a list of the files contained in the installation package that are installed, some of which remain after disinfection:

  • Device\Program Files\Smartphone\hsmsutil.dll
  • Device\Program Files\Smartphone\OpenNETCF.dll
  • Device\Program Files\Smartphone\OpenNETCF.Net.dll
  • Device\Program Files\Smartphone\smarphone.log
  • Device\Program Files\Smartphone\Smartphone.exe
Back to the Top

Detection

F-Secure Mobile Anti-Virus for Windows Mobile detects this malware starting from the update build number 24.
Back to the Top



F-Secure Corporation

Last Modified: May 11, 2007