1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Labs
  2. Threats
  3. Virus and threat descriptions
  4. Trojan:AndroidOS/Fakeplayer.A

Trojan:AndroidOS/Fakeplayer.A

Name : Trojan:AndroidOS/Fakeplayer.A
Detection Names : Trojan-SMS.androidOS.fakeplayer.a
Category:Malware
Type:Trojan
Platform:AndroidOS

Summary

Also known as a trojan horse program, this is a deceptive program that performs additional actions without the user's knowledge or permission. It does not replicate.

Disinfection

Trojan:AndroidOS/Fakeplayer can be uninstalled with the following steps:

  •   Go to Settings
  • Go to Applications
  • Go to Manage Applications
  • Select "org.me.androidapplication1"
  • Press 'uninstall' and wait

Additional Details

Trojan:AndroidOS/Fakeplayer.A is distributed disguised as a media player application. On installation and execution, the trojan silently sends SMS messages to Russian premium shortcode numbers.

The trojan's behavior may result in unexpectedly high usage charges for the user, but only if they are in the region of Russia or are able to successfully send SMS messages to the shortcode number.


Installation

On installation, the trojan displays the following warning dialogue, indicating that the application can (and is allowed to) send SMS messages:

      


Execution

On execution, the trojan displays Russian text which translates as:

  •   "Wait, sought access to video library.."

Meanwhile in the background, the trojan silently sends SMS messages containing the text "798657" to premium Russian SMS shortcode numbers:

  •  3354
  • 3353