Flexispy.A is a commercial spying application written for the Symbian OS. It records details of voice call information, SMS information and contents, and sends the details to a remote server. When Flexispy.A is installed on the phone it will hide from Symbian's built in process menu and it does not have any visible user interface or icon. After Flexispy.A is installed on the phone, the only indication that it is installed is that the application removal menu has an additional application named "phones" in the list. This "phones" application cannot be removed with the application manager.

Flexispy.A has a hidden user interface that can only be accessed using a special code known to the person who has purchased the spying application and has installed it on the phone.

In the user interface the attacker can control when the spying application reports and what information is recorded. Flexispy.A records both voice call and SMS information and sends the details to the FlexiSpy server. From there the information can be accessed through a web browser.

Flexispy.A records the following details from the victim's voice calls:

• IMEI
• Client time
• Server time
• Direction
• Duration
• Phone number
• Contact name in the victim's phonebook

Flexispy.A records the following details from the victim's SMS message traffic:

• IMEI
• Client time
• Server time
• Direction
• Duration
• Phone number
• Contact name in the victim's phonebook
• Contents of SMS messages

Disinfecting using F-Secure Mobile Anti-Virus

1. Download F-Secure Mobile Anti-Virus from http://phoneav.com and activate the Anti-Virus
2. Scan the phone and remove any components of the malware
3. Reboot the phone to remove memory resident components
4. Go to application manager and remove the "phones" application to remove any remaining components

http://www.f-secure.com/v-descs/flexispy_a.shtml