Mobile virus information
CABIR
The Cabir virus infects SYMBIAN phones using the serie 60 platform only!
It spreads using the bluetooth function in the phones and shows itself as "cabir.sis" in the inbox folder, which contains the virus!
If the user chooses to install the application in curiosity the worm instantly starts to look for other units to infect via bluetooth.
The Cabir worm will try to infect only ONE other bluetooth unit per reboot, if it succeeds sending the cabir.sis file to it, it will lock to that phone and then not try to send the file anymore. When phone is turned off/on it will try to infect one more and so on.

Cabir virus can ONLY infect phones which are in bluetooth "discoverable mode"!

To remove the virus, install a file manager application and remove the following files:

c:\system\apps\caribe\caribe.rsc
c:\system\apps\caribe\caribe.app
c:\system\apps\caribe\flo.mdl
c:\system\recogs\flo.mdl
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.app
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.rsc




--------------------------------------------------------------------------------

DUTTS
The Dutts virus only infects Windows CE devices.
Its a "proof of concept" virus, asking for persmission to infect the PDA. Not considered dangerous.

When the virus is launched it will prompt the user with "Dear User, am I allowed to spread?" - Just type NO, and you dont have to think anymore about it :)

Dutts infects files more than 4096 bytes and only in the "My Device" root. Therefor its easy to remove yourself with a file manager. Just delete all the files there.


--------------------------------------------------------------------------------

MOSQUITO
The virus infects Symbian phones!
"Mosquito" is a game for symbian phones you can buy, but on P2P services there is a cracked version of it.. which has the virus in it!

The Mosquito virus is an extremely evil one of its kind. When playing the cracked game, text messages is continuously being send from you phone to numbers in United Kingdom, Germany, the Netherlands and Switzerland!

It does fast get REALLY expensive to play the game, better to buy it original then ;)
To get rid of the virus .. DONT play the game! If you know its the cracked version, just delete it. There is nothing dangerous in playing the original game.


--------------------------------------------------------------------------------

SKULLS
Infects Symbian phones!
This virus replaces all the icons on your phone with "skulls" and deactivates all menu's on your phone. Only incomming calls will work on infected phones.

On the internet and P2P services Skulls is called "Extended Theme Manager" se be aware of that name!
To remove the virus you will need to HARD RESET your phone.


SKULLS-B
This virus infects symbian phones and does the same as "Skulls".
The only (And big!) difference is, that it spreads like the Cabir worm by bluetooth, making it able to spread by itself without the users permission to install it.

To avoid this virus but you bluetooth phone in "Hidden" mode so the Cabir virus cant find it. If you have been infected you will need to hard reset your phone to get rid of it, just like normal "Skulls".



thanks to gsminside for the information

Its much appreciated this comprehensive guide to the virus that can affect our phones. Many thanks microstarGSM.

its really scary to know so many viruses are out there to get to our phones. thankyou for the guide pls keep updating. thankyou

its really scary to know so many viruses are out there to get to our phones. thankyou for the guide pls keep updating. thankyou

hi...i own an n-gage qd .. and was just curious ...because n-gage qd doesnt support themes...and since the skull virus spreads thru a theme file.. is it of risk to n-gage qd owners ?

hi...i own an n-gage qd .. and was just curious ...because n-gage qd doesnt support themes...and since the skull virus spreads thru a theme file.. is it of risk to n-gage qd owners ?

Hey, I didn't think of that. Can anybody plz answer it?

thnx for the info

thanks for your kind infromation :D

hello
Is there any Antivirus KNOWN uptill now?

Regards
Jawad

I belive there are anti-viruses to be found on this forum....if u dont find them then they can be removed manually...

i use F-CABIR is good

Simworks anti-virus full version can be found on "some new stuff" topic by donsalieri117 in symbian apps section. On page 30 i think.:)

ill b ok then coz my 7600 is series 40! :-)

hi...i own an n-gage qd .. and was just curious ...because n-gage qd doesnt support themes...and since the skull virus spreads thru a theme file.. is it of risk to n-gage qd owners ?

maybe. it's not because of supporting themes. it's because of version(symbian). if it spreads to 7650, it can spread to n-gage or any phone which has symbian os too. Shortly, i dunno :D

thanks for posting this micro ..very interesting read indeed

Its not a real viruses. Its manual viruses.

can't believe people who make viruses...
first the PC, now mobile...

virus makers think they so smart doing that,
then when virus hunters break it,
they do another one, BETTER...

there genuises is put in the wrong use..
i feel ashame for those people...
WHY..WHY...

make my life harder as it is.... sob

I have no idea there are so many mobile phone virus around... :twisted:

anyone know how the virus get in the mobile phone?

ala bluetooth...

and also thing u download from the internet to the phone..

so, think twice b4 install apll/game in ur phone..

is there a software that we have run like anti-virus type junk. i got most of my games from i-phone and the rest from IRC. i hope i dont have that text messaging one.

Awful!!!!!!!
I hope our cellular phones never encounter these horrible viruses!!!!!
Thanks so much for the information!

is cabir fix for carbir viruses only

is cabir fix for carbir viruses only
Yep, only for caribe virus :wink:

is there an anti virus programe to stop all viruses?

just curious.

are all files available here are virus free?

well, i think they all should be. :roll:

wahhahahahahahhahahahahahahhaa..........

Here some info about an another one
[Only registered and activated users can see links]

BR

how this virus came???

it very easy, never read the message subject cabir.sis...
delete it after u received this file in your inbox...

waks..., is it really virus in phone? i think it's just rumour...

Am from Sg, the other day I was at far east plaza, at the restraunt eating, this bloody mat started out by sending me pics via blue tooth than he send the carbir virus over, thank god I didnt install the file

soz guys cabir is my creation it was a test but its gone crazy

anyway to solve this virus problem?

Most of these viruses are made in my country, the Philippines. Its such a waste that good programmers were turned into assholes and made viruses

thankes agine
3
4
5
6
7
8
9
0

thks for info..........

virus aroung mobile phone, it's incredible

thanks microstargsm for the info!!!more power!!!

wow i will kill them all. so bad now, cellphone also haf virus

there are virus checkers for mobiles now.

could nokia 6230 catch some viruses too???

which one is the best there.......I mean Antivirus.......

If thers already exists a thread on this Plzz refer....Thanx

Kaspersy is really good
[Only registered and activated users can see links]

the only problem was that the s60 version didn't work with 6600,so I installed the sx1 and it works fine....

thanks for this very very useful info

tanxs for the info guys
my frien phone had a virus caribe in his phone when i tell about to remove the caribe file and his phone had no problem with the virus any more thanx gus

Thx for this info. :)Didnt know there were so many viruses waiting to attak!lOl.
Worth reading..

can anti-virus detect these virus even without scanning it

i dont think so ! its a mobile not pc so it scan only when u order ! ,

Nice, more info on virus.

Nice, more info on virus.

yeah you want more info on the virus ? my 6600 getten ****** by caribe :lol:

damn, i think i've been infected by skull until my n-gage stop workin,,thanx for the info's

How caribe virus actualy does to your phone?

i see tat there some anti virus application here, is it useful against all tat?

beware also of the virus thru mms.... the file is wcomm.sis ... it sends itself as mms so you will be charged with high cost of mms sending. the virus is warrior command or something. when you receive file thru mms... dont install it.

so is there any more virus found in singapore... i would like to know more about it... i think i know there is 1 more virus in singapore... and the virus name is 'yuan' i think the virus came from malaysia...

I use Virus stop for my phone. It is ok! You should try it below! ^_^ Have fun!

Most mobile operators are now blocking sis files on their MMS-C... so no more worries about those nasty MMS virusses.. :-)

Really thanks for this useful information!
I think just like our computer, an Anti Virus is a must!
It is Scary!

Sorry for adding another question:

While I was still using a non-Symbian Nokia phone (6510), I sometimes received "settings" from my operator and let me "use" it automatically did certain settings (GPRS etc...) for me. Is it actually a virus? Can I also "use" this auto-config file in future when I am using a Symbian phone?

Thanks!

good work..i had the virus..

THanks.. Now its ok (Y)

are there any antivirus

It seems most of the viruses are built to attack symbain phones lolx

Scary that they have viruses for just about everything now.

Need some help, anyone know where any safe website to download the free Norton Anti-Virus programme to protect the mobile phone against the virus?

Need some help, anyone know where any safe website to download the free Norton Anti-Virus programme to protect the mobile phone against the virus?

Use search, we have many other anti-virus software for cell on the forum.

Regards
Kassad

Need some help, anyone know where any safe website to download the free Norton Anti-Virus programme to protect the mobile phone against the virus?

Use search, we have many other anti-virus software for cell on the forum.

Regards
Kassad

A new Symbian trojan that locks the phone MMC card




Recently, F-SECURE had found a new type of mobile trojan that will disable the phone memory card and generates random password on it and thus user may have problem accessing the memory card.

SymbOS/Cardblock.A is a Symbian trojan that is the first known trojan to attack phones MMC card. SymbOS/Cardtrap.A used phones MMC card in trying to get users PC infected with Win32 malware, but Cardblock.A is the first one that actually attacks the MMC card itself.

SymbOS/Cardblock.A is a trojanized version of Symbian application InstantSis created by Biscompute.

When installed Cardblock.A appears be a cracked version of InstallSis providing user with ability to repack already installed SIS files and copy them to another device.

However when user tries to use Cardblock.A to copy an application, a payload triggers that blocks the MMC memory card of the phone and deletes critical system and mail directories.

Blocking the memory card is done by setting a random password to the card. So that after the phone has been once rebooted, the card is no longer accessible on the phone or any other device, without entering a password. And as the password is a random code, that is not provided to user, the card and it's contents are unusable until unlocked.

Deleting system directories destroys information about installed applications, users MMS and SMS messages, phone numbers stored on the phone and other critical system data. Which means that user loses access to applications he has installed into the phone, and his phone numbers and other important data.

Some phone such as Nokia 6670 and Nokia 6600 survive from deletion of system directories quite easily, just a reboot and phone is usable. But the user data and MMC card are still lost.

Unfortunately some phones that use newer versions of Symbian OS, such as Nokia 6630 are hit harder. These phones will fail to reboot and display message that requests the phone to be taken to maintenance. However the phone can be recovered with special hard format key combination.

The picture in this blog entry is from one such phone. The message is in Finnish which translated in English means, "Connection to phone failed, please contact supplier of the phone". The interesting bit is that we had the phone set in English when infecting it, but the Cardblock.A damages the OS so badly, that after reboot it even doesn't remember which language it should use.

Database update for F-Secure Mobile Anti-Virus has been published and it is capable of detecting and removing Cardblock.A. We are still working on how to get locked MMC cards functional again.

Needless to say that the Cardblock.A is not a threat to people who don't use pirate copied software, as it pretends to be a pirate copied version of commercial application.


Sincerely yours,
SF team,
Apoc


BR,

oh my God..

anyway..deeply thanks for your information..

any anti virus that could kill the virus?

thanks so much ..

does simworks antivirus 1.2.2 protects against that virus..

Read of this a few days back on symbian freaks and is quite a major threat . Simworks not been updated since june so wont protect against this virus . Cheers for posting this info mate :-)

i got norton software , will it b able to delete tat trojan on my hp?

is there anymore antivirus program to protect our phone?

any crack antivirus can remove adn fix this virus

thanks for info!

hi there usefull subject i just got that caribe.sis when i was on the train i found your tutorial very helpfull keep up the good work much apreciated :D :D :D :D :D :D :D :D

WoW! never heard. thx for info

i hope my phone wont infected.

will now merge this topic with the already existant mobile phone virus info topic made by microstart.br

Need For Speed Underground2 By V-Cast Repacked For Nokia Symbian(Only 6630,6680,6600,N-Gage,N-Gageqd) is a name for Symbian Game ''NFSU 2''. I've downloaded it, installed it opened my menu. And then, I see only skulls and hearts, man... First it installes NFSU 2, then Splinter Cell (something like that). Be careful.

thx for the info. i will merge this topic with the anouncement topic for mobile phone virus info on this section.br

heard of a virus that steals ur contact list and send it over BT

any info guys......????

virys is that painful

virys is that painfula

dont belive it

whayasfsaf

looks like its oot