Mabtal.A is a SIS file trojan. It has been distributed as a cracked
version of a legitimate email application, Profimail. The application
filename we've seen has been "Profimail v2.75_FULL.sis".
When installed, this trojan will drop the Mabir.A virus and the Fontal.A
and Locknut.B trojans to the system.
Mabtal.A contains this text:
Profimail v2.25 multilingual pack cracked by UAE cracker team!
If you like it, please buy it, just crack for fun! ^_^
Generic detection that detects Cabir.F was published for
F-Secure Mobile Anti-Virus on December 13th, 2004
in database build number 15.
Write-up:
Mikko Hypponen, 12th of July 2005;
Description updated:
Jarno Niemela, 27th of Septebmer 2005;
F-Secure Corporation