Risiko: sehr gering
Typ: Wurm
entdeckt am: 15. Juni 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir ist ein Wurm, der über Bluetooth verteilt wird. Er befällt Nokia S60 Mobiltelefone.

technische Details:

SymbOS.Cabir is a proof-of-concept worm that propagates through Bluetooth-enabled devices. The worm runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

When the worm is executed, it displays one of the following messages:
Caribe-VZ/29a
Caribe
Mytiti
[YUAN]
Ni&Ai-

The worm then creates the following files on the device:
\SYSTEM\APPS\CARIBE\CARIBE.APP
\SYSTEM\APPS\CARIBE\CARIBE.RSC
\SYSTEM\APPS\CARIBE\FLO.MDL
\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.APP
\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.RSC
\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.SIS
\SYSTEM\RECOGS\FLO.MDL
\SYSTEM\INSTALLS\CARIBE.SIS

Possible presence of the following files:
MYTITI.SIS
[YUAN].SIS
Ni&Ai-.SIS
Norton AntiVirus 2004 Professional.sis

The worm then begins scanning for other Bluetooth-enabled devices to send itself to. The worm will attempt to send itself to any Bluetooth devices. The worm will execute every time the device is powered off and back on.

It is not currently known if the worm will propagate to other Symbian OS devices.

weitere Informationen...