F-Secure Trojan Information Pages : RommWar [ Summary ] | [ Disinfection ] Name: RommWar Type: Trojan Category: Trojan Platform: SymbOS Date of Discovery: April 02, 2006 Summary SymbOS/RommWar is a malicious SIS trojan that installs a malfunctioning system component that causes the phone to freeze, requiring a restart. SymbOS/RommWar uses MIME recognizer to execute the malfunctioning system component causing the phone to freeze shortly after the restart of the phone. Disinfection CAUTION! this method will remove all data on the device including calendar and phone numbers: Power off the phone Hold the following three buttons down - "answer call" + "*" + "3" Keep holding down the buttons and power on the phone Depending on the model, you will either get text that reads "formatting" or a start-up dialog that asks for the initial phone settings Your phone is now formatted and can be used again Back to the Top Write-up: Juha-Pekka Heikkilä, April 6, 2006 Technical Details: Juha-Pekka Heikkilä, April 6, 2006 F-Secure Corporation