F-Secure: Be Sure
Main
F-Secure Logo - Be Sure
Select local site


Privacy Policy
Contact Us

F-Secure Virus Information Pages : Appdisabler.H

[Summary] | [Disinfection] | [Detailed Description] | [Detection]

Name:Appdisabler.H
Alias:Appdisabler.I (renamed to H)
Category:Virus

Summary

Appdisabler.H is a malicious SIS file trojan, which tries to disable
large number of third party applications.

Disinfection

Disinfection

Use application manager to uninstall Raghu.sis and reinstall
any third party applications damaged by the trojan.


Back to the Top


Detailed Description

Spreading in

Raghu.sis

Installation to system

When installed Appdisabler.I will replace the main executable of several
third party applications by overwriting their main executable file.

If any third party applications targeted by the trojan are installed
on the device, their main executable will be overwritten, and must be
reinstalled to repair the damage.

Payload

Disables following applications

AD7650

AnswRec

BlackList

BlueJackX

callcheater

CallManager

Camcoder

camerafx

ETICamcorder

ETIMovieAlbum

ETIPlayer

extendedrecorder

FaceWarp

FExplorer

FSCaller

Hair

HantroCP

irremote

Jelly

KPCaMain

Launcher

logoMan

MIDIED

mmp

Mp3Go

Mp3Player

photoacute

PhotoEditor

Photographer

PhotoSafe

PhotoSMS

PVPlayer

RallyProContest

realplayer

RingMaster

SmartAnswer

SmartMovie

SmsMachine

Sounder

sSaver

SystemExplorer

UltraMP3

UVSMStyle

WILDSKIN


Back to the Top


Detection

F-Secure Mobile Anti-Virus for Symbian detects this malware starting from the update build number 56.


Back to the Top


Write-up: Mika Tolvanen Nov 25th, 2005;

Description Updated: Jarno Niemelä, December 21, 2005

F-Secure Corporation