Trojan:Android/IconoSys.A
Summary
IconoSys.A may leak the information that it requested from user during the registration to other unintended recipients.
Removal
Once the scan is complete, the F-Secure security product will ask if you want to uninstall the file, move it to the quarantine or keep it installed on your device.
A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:
-
Check for the latest database updates
First check if your F-Secure security program is using the latest updates, then try scanning the file again.
-
Submit a sample
After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.
Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.
-
Exclude a file from further scanning
If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.
Note: You need administrative rights to change the settings.
Technical Details
IconoSys.A is distributed under various application names, such as My Pony's Birthday Countdown, My Twitter Pics, Blonde Jokes, and SMS W!sh, but all lead to the same registration page.
IconoSys.A distributed as My Twitter Pics
IconoSys.A distributed as My Pony's Birthday Countdown
During the registration, users are asked to provide several information which may be leaked to other unintended recipients. The information that users provide include:
- Device manufacturer
- Device model
- Email address
- International Mobile Equipment Identity (IMEI) number
- Package version
- Phone number
- User's age
- User's gender
- User's name
Screenshots of IconoSys.A during registration