Threat Description

Trojan: SymbOS/RommWar

Details

Category: Malware
Type: Trojan
Platform: SymbOS
Date Discovered: April 02, 2006
Aliases: RommWar

Summary


SymbOS/RommWar is a malicious SIS trojan that installs a malfunctioning system component that causes the phone to freeze, requiring a restart.



Removal


Disinfection for the cases when phone cannot start up

CAUTION! this method will remove all data on the device including calendar and phone numbers:

  • Power off the phone
  • Hold the following three buttons down - "answer call" + "*" + "3"
  • Keep holding down the buttons and power on the phone
  • Depending on the model, you will either get text that reads "formatting" or a start-up dialog that asks for the initial phone settings
  • Your phone is now formatted and can be used again


Technical Details


SymbOS/RommWar uses MIME recognizer to execute the malfunctioning system component causing the phone to freeze shortly after the restart of the phone.





Description Details: Juha-Pekka Heikkila, April 6, 2006
Technical Details:Juha-Pekka Heikkila, April 6, 2006


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Protect your life on every device

F-Secure SAFE looks out for you and the people close to you, on every device, all the time.

Learn More