New Zealand based anti-virus company Symworks released information on two new malware for Symbian smartphones, one of them includes disable of anti-virus applications.
METAL Gear.a icon uses the Skulls mechanism to disable specified anti-virus software (including SimWorks Anti-Virus) on the phone. The second worm, SEXXY.a, is bundled as part of METAL Gear.a and it uses Cabir.c to distribute itself onto other phones. Cabir.c was previously identified as the first trojan capable of replicating itself via Bluetooth to other Symbian smartphones.
METAL Gear.a was identified early this morning New Zealand time. This trojan masquerades as a Symbian version of the popular game Metal Gear Solid. The installation file for the trojan is called METAL Gear.sis.
When a user installs this file on their phone the installation file disables specified anti-virus applications on the phone. It also disables all file explorers and several other applications making it difficult to remove. At the same time it installs Cabir.c (with a Metal Gear icon displayed in the applications menu) and a further installation file called SEXXXY.sis. If the user opens the Metal Gear icon (mistaking it for a Symbian version of the Metal Gear Solid game) Cabir.c will start and if there are any phones with bluetooth enabled in the vicinity then Cabir.c will endeavour to send SEXXXY.sis to those phones.
If a user accepts SEXXXY.sis on their phone then it will disable the Symbian application selection button on the handset.
The company has already released an updated version of its anti-virus with a solution for removal of these two trojan programs. The program comes in two versions, one compatible with all phones using the Symbian operating system with the 127963 UIQ (SonyEricsson P800/P900/P910) interface or 127965 Series 60 (Nokia 3650, Nokia 6600, Sendo X).