Home>Network Worms>Internet Worms>

Worm.SymbOS.Cabir.c

tag:Internet Worms

In order for a device to become infected, the user has to accept the malicious file twice:

When the malicious program is being installed, two messages will be displayed on the device's screen:

During installation, the program will drop the following files to the smartphone:

C:\SYSTEM\apps\caribe\CARIBE.APP
In order to delete this malicious program, install a file manager application which provides the option to view hidden and system files. Then delete the files listed below:
```
C:\SYSTEM\apps\caribe\CARIBE.APP
C:\SYSTEM\apps\caribe\CARIBE.RSC
C:\SYSTEM\apps\caribe\FLO.MDL
C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CARIBE.SIS
C:\SYSTEM\apps\CamTimer\camtimer.app
C:\SYSTEM\apps\CamTimer\camtimer.rsc
```
Once you have done this, reboot the device.

This malicious program is a worm which runs under Symbian. The worm itself is a SIS file. The file is 13,200 bytes in size.

It spreads via Bluetooth.
Payload

previous:Worm.SymbOS.Cabir.b
previous:Worm.SymbOS.Comwar.a

Virus Source from:

New articles

Net-Worm.Win32.Kido.irThe kido worm family creates files autorun.inf and RECYCLED{SID<....>}RANDOM_NAME.vmx on removable drives (sometimes on public network shares) Net-Worm...MS10-061MS10-061 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in the Windows Print Spooler service on Wind...MS10-062MS10-062 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in MPEG-4 codec on Windows 2008/vISTA/2003/XP computers, wh...MS10-063MS10-063 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in the Unicode Script Processor on Windows 2...Autorun.AOLAdditionally, it has backdoor characteristics, as it attempts to connect to an IRC channel in order to receive instructions from its creator, such as downloadin...

Hot Articles

Worm.SymbOS.Cabir.c

Computer Virus Clounds