Home / malware AppDisabler.Q
First posted on 01 March 2007.
Source: SecurityHomeAliases :
There are no other names known for AppDisabler.Q.
Explanation :
Appdisabler.Q is a malicious SIS file trojan, which tries to disable number of Symbian OS system and third party applications.
When installed, Appdisabler.Q will replace the main executable of several system and third party applications by overwriting their main executable file.
If any third party applications targeted by the trojan are installed on the device, their main executable will be overwritten, and must be reinstalled to repair the damage.
Payload
Attempts to disable following applications:
- Appinst
- Appmngr
- Browser
- BtUi
- DivXplayer
- Duality
- FileManager
- gnubox
- GOBOYAPP
- IrApp
- IrRemote
- mce
- MediaGallery
- MediaPlayer
- Menu
- MM
- mmcapp
- MmsViewer
- MsgMailViewer
- NSmlDSSync
- Opera
- Phone
- Phonebook
- s60zip
- SmartMovie
- SmsViewer
- Startup
- symcs
- symlu
- SysAp
- SystemExplorer
- UltraMP3
Appdisabler.Q also overwrites the install log in the telephone attempting to prevent removal of the trojan with the phone's application manager.
Last update 01 March 2007