F-Secure Virus Descriptions : Appdisabler.C

Summary

Appdisabler.C is a malicious SIS file trojan, which tries to disable large number of third party applications.

Disinfection

Disinfection

Use application manager to uninstall 6600_BRAND NEW SVEDEN MP3 PLAYER.SIS and reinstall any third party applications damaged by the trojan.

Back to the Top

Detailed Description

Spreading in 6600_BRAND NEW SVEDEN MP3 PLAYER.SIS

Installation to system

When installed Appdisabler.C will replace the main executable of several third party applications by overwriting their main executable file.

If any third party applications targeted by the trojan are installed on the device, their main executable will be overwritten, and must be reinstalled to repair the damage.

Payload

Disables following applications

AD7650
AnswRec
BlackList
BlueJackX
callcheater
CallManager
Camcoder
camerafx
ETICamcorder
ETIMovieAlbum
ETIPlayer
extendedrecorder
FaceWarp
FExplorer
FSCaller
Hair
HantroCP
irremote
Jelly
KPCaMain
Launcher
logoMan
MIDIED
mmp
Mp3Go
Mp3Player
photoacute
PhotoEditor
Photographer
PhotoSafe
PhotoSMS
PVPlayer
RallyProContest
realplayer
RingMaster
SmartAnswer
SmartMovie
SmsMachine
Sounder
sSaver
SystemExplorer
UltraMP3
UVSMStyle
WILDSKIN

Back to the Top

Detection

Detection for F-Secure mobile Anti-Virus has been published on August 17th, 2005 in database build number 46.

Back to the Top

Write-up: Jarno Niemela August 17th, 2005;

F-Secure Corporation