S60v3's First Virus

Remember the days when you didn't need an anti-virus software for your S60v3 phone? Well, now with this virus set loose..... you still don't really need it. I guess in a way it's a milestone for this platform as now the Symbian S60 3rd Edition OS 9.x finally has it's own virus! Why am I still so enthusiastic? Mainly because this "virus" doesn't really pose a threat.

A little info on the little bugger:

SymbOS.Hatihati.A

Risk Level 1: Very Low

Discovered: February 6, 2008

Updated: February 13, 2008 10:07:33 AM

Type: Trojan

Infection Length: 23,643 bytes

Systems Affected: Symbian OS

SymbOS.Hatihati.A is a Trojan horse that runs on the Symbian OS. The Trojan is a pirated version of the anti-theft software Guardian v0.95.

Protection

• Initial Rapid Release version February 13, 2008 revision 035
• Latest Rapid Release version February 13, 2008 revision 035
• Initial Daily Certified version February 6, 2008 revision 003
• Latest Daily Certified version February 6, 2008 revision 003
• Initial Weekly Certified release date February 6, 2008

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low
• Payload: Sends SMS messages to a predefined number from the compromised device.

Distribution

• Distribution Level: Low

Writeup By: Robert Wang

Here's a link to Symantec's website where they have a more detailed writeup on this virus, including ways of getting rid if you actually got infected.

SymbOS.Hatihati.A -Symantec.com-