F-Secure
Tools
Trojan:SymbOS/Fontal
| Name : | Trojan:SymbOS/Fontal |
| Category: | Malware |
| Type: | Trojan |
| Platform: | SymbOS |
Summary
Also known as a trojan horse program, this is a deceptive program that performs additional actions without the user's knowledge or permission. It does not replicate.
Disinfection
F-Secure Mobile Anti-Virus will detect Fontal.A and delete the trojan's components.
• Open web browser on the phone
• Go to http://mobile.f-secure.com
• Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
• Download the file and select open after download
• Install F-Secure Mobile Anti-Virus
• Go to applications menu and start Anti-Virus
• Activate Anti-Virus and scan all files
After disinfecting you phone, you can remove remaining empty directories by going to application manager and uninstalling the SIS file in which Comwarrior arrived (Kill Saddam By OID500.sis).
Manual disinfection
Manual disinfection
• Install file manager on the phone
• Go to c:\System\apps\appmngr
• Delete appmngr.app
• Go to the application manager
• Uninstall the SIS file in which the Fontal.A was installed in
Disinfection for cases when phone is already rebooted and cannot start up
CAUTION! This method will remove all data on the device, including calendar and phone numbers.
• Power off the phone
• Hold following three buttons down "answer call" + "*" + "3"
• Keep holding the buttons and power on the phone
• Depending on the model, you either get text "formatting" or startup dialog that asks for initial phone settings
• Your phone is now fomatted and can be used again
Additional Details
Variants in the Trojan:SymbOS/Fontal family affect devices running the Symbian S60 operating system. They are distributed in malicious Symbian Installation (SIS) files. The names of the malicious files may vary depending on the specific variant.
When executed, the Fontal variant will install a corrupted Font file on the device. When the device is next rebooted, the corrupted file is loaded instead of the correct original one; this causes the phone to fail.
For further details on various Fontal variants, please visit the links below: