SymbOS/Cabir.B!worm

Alias/esEpoc/Cabir [F-Prot], Symb/Cabir-B, SymbOS.Cabir.B [NAV], SymbOS/Cabir.B, SymbOS/Cabir.B-wm, SymbOS/Cdropper.C, SymbOS/Locknut.B-net, Worm.SymbOS.Cabir.c
Release DateJun 14, 2004
Detection Availability
Active DatabaseExtended Database
FortiGatelowhigh
FortiClient
FortiMailN/A
Current Antivirus Definition Database Version: 12.339
Description

Visible Symptoms

  • The following message is displayed:
    Caribe-VZ/29a

Detailed Analysis

  • It is a Symbian virus, packed in .SIS format.

  • The following message is displayed on the screen during installation:
    This is advanced camera timer for your phone!
  • Extracts the following files:

    • C:\system\RECOGS\flo.mdl
    • C:\system\CARIBESECURITYMANAGER\caribe.app
    • C:\system\CARIBESECURITYMANAGER\caribe.rsc
    • C:\system\CARIBESECURITYMANAGER\CAMTIMER.sis
    • C:\system\apps\caribe\flo.mdl
    • C:\system\apps\caribe\caribe.app
    • C:\system\apps\caribe\caribe.rsc
    • C:\system\apps\CamTimer\camtimer.app
    • C:\system\apps\CamTimer\camtimer.rsc

  • Attempts to send itself to other Bluetooth-enabled devices that it finds.
Description Last Updated Date: Sep 22, 2005
Reference: ID - 95430