F-Secure Trojan Information Pages : Cardtrap.O [Summary] | [Disinfection] | [Detailed Description] Name: Cardtrap.O Category: Trojan Platform: SymbOS Summary Cardtrap.O is a minor variation of Cardtrap.N. Cardtrap.O is Symbian SIS file trojan that disables several Symbian built in applications, tries to damage several anti-virus applications, and installs several Windows viruses worms and trojans to memory card. The Windows malware installed to memory card is installed with icons, batch files and short cut links, that try to fool user to execute a malicous file when he is trying to investigate the card contents. The files that Cardtrap.O drops to the memory card, contains several references to F-Secure and some files are with F-Secure icons. But F-Secure has nothing to do with creation of Cardtrap or any other malware. Disinfection Disinfection with Anti-Virus 1. Download F-Secure Mobile Anti-Virus to your phone from http://www.f-secure.com/wireless/download/ 2. Install the Anti-Virus to your phone over USB cable 3. Start and activate the Anti-Virus 4. Scan your phone to remove infected files 5. Use application manager to uninstall the file in which you installed Cardtrap.O. Back to the Top Detailed Description Spreading in Video_Compressor_v103.SIS Payload Cardtrap.O installs several damaged files to phone memory to disable key system applications and anti-virus products. Cardtrap.O disables following system applications: Application manager Browser File manager Media gallery MMS and SMS messaging inbox F-Secure Mobile Anti-Virus is capable of detecting Cardtrap.O with generic detection, so if phone has functional Anti-Virus installed the Cardtrap.O is blocked before it can be installed. Back to the Top Write-up: Mika Tolvanen Technical Details: Mika Tolvanen, December 21, 2005 F-Secure Corporation