Spyware.iCam

SUMMARY

Behavior

Spyware.iCam is spyware program that runs on cellular phones running the Symbian OS. It uses the camera and the sound recorder to take screenshots, videos, and sound recordings, and sends the recorded data to a designated phone number.

Symptoms

Your Symantec program detects Spyware.iCam.

Transmission

Spyware.iCam must be manually installed.

Protection

• Initial Rapid Release version April 26, 2006
• Latest Rapid Release version April 26, 2006
• Initial Daily Certified version April 26, 2006
• Latest Daily Certified version December 10, 2007 revision 036
• Initial Weekly Certified release date April 26, 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

TECHNICAL DETAILS

When Spyware.iCam is executed, it performs the following actions:

1. Displays the following message, when a user opens the file:
   
   Install
   iCamCU?
   
   
2. Drops the following files to the device:
   
   
   • [DRIVE LETTER]:\system\apps\iCam.app
   • [DRIVE LETTER]:\system\apps\iCam.rsc
   • [DRIVE LETTER]:\system\apps\iCam.aif
   • [DRIVE LETTER]:\system\apps\iCam_xip.aif
   • [DRIVE LETTER]:\system\apps\iCamHelp.hlp
   • C:\system\apps\iCamMenu.MBM
     
     The installer also creates:
     
   • C:\system\install\iCamS60.2.2.Generic.sis

REMOVAL

Install a file manager program on the device.

1. Enable the option to view the files in the system folder.
   
   
2. Delete the following files:
   
   
   • [DRIVE LETTER]:\system\apps\iCam.app
   • [DRIVE LETTER]:\system\apps\iCam.rsc
   • [DRIVE LETTER]:\system\apps\iCam.aif
   • [DRIVE LETTER]:\system\apps\iCam_xip.aif
   • [DRIVE LETTER]:\system\apps\iCamHelp.hlp
   • C:\system\apps\iCamMenu.MBM
   • C:\system\install\iCamS60.2.2.Generic.sis
     
     
3. Exit the file manager.