F-Secure Virus Descriptions : Mabtal

[Summary] | [Detection]

NAME:	Mabtal
ALIAS:	SymbOS/Mabtal.A

Summary

Mabtal.A is a SIS file trojan. It has been distributed as a cracked version of a legitimate email application, Profimail. The application filename we've seen has been "Profimail v2.75_FULL.sis".

When installed, this trojan will drop the Mabir.A virus and the Fontal.A and Locknut.B trojans to the system.

Mabtal.A contains this text:

  Profimail v2.25 multilingual pack cracked by UAE cracker team!
  If you like it, please buy it, just crack for fun! ^_^

Detection

Generic detection that detects Cabir.F was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in database build number 15.

Back to the Top

Write-up: Mikko Hypponen, 12th of July 2005;

Description updated: Jarno Niemela, 27th of Septebmer 2005;

F-Secure Corporation