|
New Symbian trojan SymbOS/Blankfont.A |
|
 Blankfont.A is a SIS file trojan that
installs corrupted Font file into the infected device. The corrupted
font does not cause device to crash, but if the device is rebooted it
will lose the system font, and is unable to display user interface
texts. Even as the display is corrupted no data is lost, and the phone
can be disinfected by removing the corrupted file or uninstalling the
SIS file. However as the display is corrupted, this is not as easy as
it sounds. We are working on a disinfection tool that is easy to use
even as the display is corrupted, so that the trojan can be easily
removed. So far we have received only one sample of the Blankfont.A, so
it is not widespread. And like other Symbian trojans it pretends to be
pirate copied software, so people who don't install software from
illegal sources are not at risk.?‚
Blankfont.A is a SIS file trojan that
installs corrupted Font file into infected device. The corrupted font
does not cause device to crash, but if the device is rebooted it will
lose the system font, and is unable to display user interface texts.
Any application that user tries to use after reboot works otherwise
normally, but does not show any text. Which makes most of the
applications unusable until the phone is disinfected.
{mosgoogle}
If a phone is infected with Blankfont.A, it must not be rebooted as the
trojan will corrupt system font and make disinfection quite difficult.
If the phone is rebooted it can still be disinfected but, doing so is
rather difficult as there is no text on the screen.
Disinfection
1. Uninstall the SIS file in which the Blankfont.A was installed in
2. To make sure that uninstallation was successful, scan your phone with Anti-Virus before rebooting the phone.
Detailed Description
Spreading in Rally_2.sis
Infection
When the Blankfont.A SIS file is installed the installer copies file into following location:
?‚ system/apps/fonts/Panic.gdr
The Panic.gdr is a corrupted font file, that replaces the original phone font and breaks phones ability to show text.
Write-up: Jarno Niemela August 9th, 2005;
F-Secure Corporation?‚ ?‚
?‚
Trackback(0)
 Technorati Tags:
|
News 
TrackBack URI for this entry
Subscribe to this comment's feed
Creatures of the Deep 3D
