Kaspersky Lab Forum > Trojan.SymbOS.AVKiller.A

Kaspersky Lab Forum > English User Forum > Protection for mobile devices

Almart

1.01.2008 09:58

Trojan.SymbOS.AVKiller.A

Description:
AVKiller.A is a Trojan That Delete All Mobile AntiVirus Productions.
when appear this message for you and pressing yes will be deleted antivirus program in your phone. in this case will make your phone in unsafe without AntiVirus.

Details:
Spreading in: F-Cabir.SIS
Also the trojan is contains a file ''Disinfect.lst'' list of mobile antivirus productions that will be deleted:

CODE

=======================================================
= AVKILLER WILL KILLS ALL THESE ANTIVIRUS PRODUCTIONS =
=======================================================
=1.Symantec
=2.F-Secure
=3.SimWorks
=4.Kaspersky
=5.TrendMicro
=6.McAfee
=7.Avira
=8.Netqin
=9.Disinfector
=10.Bullguard
=11.Fonoinfo
=12.FB-4 VirusGuard
=13.ZeonAntiVirus
=14.BitDefender
=15.Jiangmin
=16.CalvinSettinger
=17.ExoVirusStop
=18.Jamanda
========================================================

Regards,
Almart

Sjoeii

2.01.2008 14:58

Did you send this to Viktor?

Whizard

3.01.2008 04:44

The detection is already present, than what seems to be the problem?

F-Secure uses KAV's engine by the way.

Almart

3.01.2008 18:54

QUOTE(Sjoeii @ 2.01.2008 14:58)

Did you send this to Viktor?

No, and I don't know it to be send to him!
only the sample was sent to AV Companies. (F-secure,Kaspersky,McAfee..etc)

QUOTE(Whizard @ 3.01.2008 04:44)

than what seems to be the problem?

1 month ago.

Viktor

3.01.2008 22:59

QUOTE(Whizard @ 3.01.2008 04:44)

F-Secure uses KAV's engine by the way.

We are tolking about mobile av products

Almart: as i know, AVKiller.A is detected by kav mobile

Almart

5.01.2008 01:19

QUOTE(Viktor @ 3.01.2008 22:59)

Almart: as i know, AVKiller.A is detected by kav mobile

Hmm! the AVKiller.A - Fortinet only that detected him.

but KAV, F-SECURE it's not detected him yet.

Fortinet Guard Scanner Engine: SymbOS/AVKiller.A!tr

Viktor

5.01.2008 19:20

QUOTE(Almart @ 5.01.2008 01:19)

Hmm! the AVKiller.A - Fortinet only that detected him.

but KAV, F-SECURE it's not detected him yet.

Fortinet Guard Scanner Engine: SymbOS/AVKiller.A!tr

OK, i'll check the problem as soon as i'm back from valation. Could you send me a file that you use for testing?

Almart

5.01.2008 20:42

QUOTE(Viktor @ 5.01.2008 19:20)

OK, i'll check the problem as soon as i'm back from valation. Could you send me a file that you use for testing?

OK, but the sample was sent to kaspersky lab before week.
if the sample is not Arrived tell me to send it again.

Viktor

5.01.2008 21:07

QUOTE(Almart @ 5.01.2008 20:42)

OK, but the sample was sent to kaspersky lab before week.
if the sample is not Arrived tell me to send it again.

plz make a copy to kavmobile@kaspersky.com

Almart

10.01.2008 03:04

Hey Viktor, why this trojan is not detected yet by kaspersky?
I have updated my Mobile KAV database Date: 08/01/2008.
but can't detect Fonzi.A and AVKiller.A

Viktor

10.01.2008 19:40

QUOTE(Almart @ 10.01.2008 03:04)

Hey Viktor, why this trojan is not detected yet by kaspersky?
I have updated my Mobile KAV database Date: 08/01/2008.
but can't detect Fonzi.A and AVKiller.A

Hi, Almart,
I'll check it

Almart

11.01.2008 04:18

Trojan.SymbOS.KillAV.A

Viktor

11.01.2008 11:51

QUOTE(Almart @ 11.01.2008 04:18)

Trojan.SymbOS.KillAV.A

very fast

Sjoeii

12.01.2008 00:06

fast indeed.
Great work

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.