Trojan.SymbOS.Mosquit.a (Kaspersky Lab)
is also known as:
SymbOS/QDial26 (McAfee), Trojan.Mos (Symantec), Troj/Mosqit-A (Sophos), SymbOS_QDIAL.A (Trend Micro), TR/SymbOS.Mosqu.A.1 (H+BEDV), SymbOS/Mquito (Grisoft), Trojan.SymbianOS.Mosqit.A (ClamAV), SymbOS/Toquimos.A (Panda), SymbOS/Mosquit.A (Eset)
| Description added |
Aug 11 2004 |
| Behavior |
Trojan |
This program is not strictly a Trojan. However, it is classifed as a Trojan
as it sends SMS messages to premium rated services without the knowledge of
the user. The numbers which messages are sent to are coded into the program.
The program masqerades as a pirate version of a popular game Mosquitos, which
runs under Symbian OS.
The game is widely available on public download sites and also via some P2P
networks:
Installation
Mosquit.a consists of an SIS installation file about 140KB in size. The original
name of the file is either "Mosquitos Cracked by Soddom.sis" or "Mosquitos Cracked
by Soddom V2.0.sis"; however, there are versions circulating on the Internet
under other names.
The Trojan itself is installed as Mosquitos.app and is 261.6 KB in size.
When users launch the game the Trojan displays the following message: