Trojan:Android/FakeVoice

Classification

Category :

Malware

Type :

Trojan

Platform :

Android

Aliases :

Trojan:Android/FakeVoice, Trojan:Android/FakeVoice.A

Summary

Trojan:Android/FakeVoice is a chargeable voice-changing application; in addition to the paid service, it makes a telephone call to a premium-rate number in România.

Removal

Once the scan is complete, the F-Secure security product will ask if you want to uninstall the file, move it to the quarantine or keep it installed on your device.

More scanning

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

FakeVoice.A is primarily distributed in Israel as a voice-changing application. Upon execution, it prompts the following questions:

  • What number do you want to dial?
  • Which sound do you want to be heard in?
    • Low and scary voice
    • Normal voice
    • High funny voice

The service costs 6 New Israeli Shekels per minute. During the call, users can press '9' to change the voice to a higher pitch or press '8' for lower pitch.

In addition to the charged service, FakeVoice.A also makes a call to a Românian premium-rate number.

More

This malware is discussed in further detail in: Q1 2012 Mobile Threat Report (PDF).