[SymbianOS] SymbOS.Cabir - Mobilfunk-FAQ

Hangman · 24.06.2007, 18:31

Risiko: sehr gering
Typ: Wurm
entdeckt am: 15. Juni 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir ist ein Wurm, der über Bluetooth verteilt wird. Er befällt Nokia S60 Mobiltelefone.

technische Details:

SymbOS.Cabir is a proof-of-concept worm that propagates through Bluetooth-enabled devices. The worm runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

When the worm is executed, it displays one of the following messages:
Caribe-VZ/29a
Caribe
Mytiti
[YUAN]
Ni&Ai-

The worm then creates the following files on the device:
\SYSTEM\APPS\CARIBE\CARIBE.APP
\SYSTEM\APPS\CARIBE\CARIBE.RSC
\SYSTEM\APPS\CARIBE\FLO.MDL
\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.APP
\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.RSC
\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.SIS
\SYSTEM\RECOGS\FLO.MDL
\SYSTEM\INSTALLS\CARIBE.SIS

Possible presence of the following files:
MYTITI.SIS
[YUAN].SIS
Ni&Ai-.SIS
Norton AntiVirus 2004 Professional.sis

The worm then begins scanning for other Bluetooth-enabled devices to send itself to. The worm will attempt to send itself to any Bluetooth devices. The worm will execute every time the device is powered off and back on.

It is not currently known if the worm will propagate to other Symbian OS devices.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 24.06.2007, 22:25

Risiko: sehr gering
Typ: Wurm
entdeckt am: 22. November 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.B is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only difference is SymbOS.Cabir.B displays the following message after infection:

Caribe

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

Ertechnische Details:

SymbOS.Cabir.B is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install caribe?

If the user chooses Install, SymbOS.Cabir is installed and executed, displaying the message:

Caribe

The worm creates the following files on the phone:

\SYSTEM\APPS\CARIBE\CARIBE.APP
\SYSTEM\APPS\CARIBE\CARIBE.RSC
\SYSTEM\APPS\CARIBE\FLO.MDL
C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.APP
C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.RSC
C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.SIS
C:\SYSTEM\RECOGS\FLO.MDL
C:\SYSTEM\INSTALLS\CARIBE.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 25.06.2007, 23:11

Risiko: sehr gering
Typ: Wurm
entdeckt am: 14. Dezember 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.C is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only differences are:
The worm spreads as ni&ai-.SIS.
The worm displays the following message after infection:

ni&ai-

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.C is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install ni&ai-?

If the user chooses Install, the worm is installed, executed, and then displays the following message:

ni&ai-

The worm creates the following files on the phone:

\SYSTEM\APPS\ni&ai-\ni&ai-.APP
\SYSTEM\APPS\ni&ai-\ni&ai-.RSC
\SYSTEM\APPS\ni&ai-\FLO.MDL
C:\SYSTEM\SYMBIANSECUREDATA\ni&ai-SECURITYMANAGER\ni&ai-.APP
C:\SYSTEM\SYMBIANSECUREDATA\ni&ai-SECURITYMANAGER\ni&ai-.RSC
C:\SYSTEM\SYMBIANSECUREDATA\ni&ai-SECURITYMANAGER\ni&ai-.SIS
C:\SYSTEM\RECOGS\FLO.MDL
C:\SYSTEM\INSTALLS\ni&ai-.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 25.06.2007, 23:14

Risiko: sehr gering
Typ: Wurm
entdeckt am: 14. Dezember 2004
auch bekannt als:

Information:

SymbOS.Cabir.D is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only differences are:
The worm spreads as MYTITI.SIS.
The worm displays the following message after infection:

MYTITI

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.D is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install MYTITI?

If the user chooses Install, the worm is installed, executed, and then displays the following message:

MYTITI

The worm creates the following files on the phone:

\SYSTEM\APPS\MYTITI\MYTITI.APP
\SYSTEM\APPS\MYTITI\MYTITI.RSC
\SYSTEM\APPS\MYTITI\FLO.MDL
C:\SYSTEM\SYMBIANSECUREDATA\MYTITISECURITYMANAGER\ MYTITI.APP
C:\SYSTEM\SYMBIANSECUREDATA\MYTITISECURITYMANAGER\ MYTITI.RSC
C:\SYSTEM\SYMBIANSECUREDATA\MYTITISECURITYMANAGER\ MYTITI.SIS
C:\SYSTEM\RECOGS\FLO.MDL
C:\SYSTEM\INSTALLS\MYTITI.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 22.07.2007, 10:54

Risiko: sehr gering
Typ: Wurm
entdeckt am: 14. Dezember 2004
auch bekannt als:

Information:

SymbOS.Cabir.E is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only differences are:
The worm spreads as [YUAN].SIS.
The worm displays the following message after infection:

[YUAN]

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.E is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install [YUAN]?

If the user chooses Install, the worm is installed, executed, and then displays the following message:

[YUAN]

The worm creates the following files on the phone:

\SYSTEM\APPS\[YUAN]\[YUAN].APP
\SYSTEM\APPS\[YUAN]\[YUAN].RSC
\SYSTEM\APPS\[YUAN]\FLO.MDL
C:\SYSTEM\SYMBIANSECUREDATA\[YUAN]SECURITYMANAGER\[YUAN].APP
C:\SYSTEM\SYMBIANSECUREDATA\[YUAN]SECURITYMANAGER\[YUAN].RSC
C:\SYSTEM\SYMBIANSECUREDATA\[YUAN]SECURITYMANAGER\[YUAN].SIS
C:\SYSTEM\RECOGS\FLO.MDL
C:\SYSTEM\INSTALLS\[YUAN].SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 22.07.2007, 11:02

Risiko: sehr gering
Typ: Wurm
entdeckt am: 30. Dezember 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.F is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only differences are:
The worm spreads as skulls.SIS.
The worm creates MOD.MDL instead of FLO.MDL.
The worm displays the following message after infection:

skulls

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.F is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install skulls?

If the user chooses Install, SymbOS.Cabir is installed and executed, displaying the message:

skulls

The worm creates the following files on the phone:

\SYSTEM\APPS\skulls\skulls.APP
\SYSTEM\APPS\skulls\skulls.RSC
\SYSTEM\APPS\skulls\MOD.MDL
C:\SYSTEM\SYMBIANSECUREDATA\SKULLSSECURITYMANAGER\ skulls.APP
C:\SYSTEM\SYMBIANSECUREDATA\SKULLSSECURITYMANAGER\ skulls.RSC
C:\SYSTEM\SYMBIANSECUREDATA\SKULLSSECURITYMANAGER\ skulls.SIS
C:\SYSTEM\RECOGS\MOD.MDL
C:\SYSTEM\INSTALLS\skulls.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 22.07.2007, 11:06

Risiko: sehr gering
Typ: Wurm
entdeckt am: 22. Dezember 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.G is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only differences are:
The worm spreads as Tee222.SIS.
The worm creates the file 222.MDL instead of FLO.MDL.
The worm displays the following message after infection:

Tee222

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.G is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install Tee222?

If the user chooses Install, the worm is installed, executed, and then displays the following message:

Tee222

The worm creates the following files on the phone:

\SYSTEM\APPS\Tee222\Tee222.APP
\SYSTEM\APPS\Tee222\Tee222.RSC
\SYSTEM\APPS\Tee222\222.MDL
C:\SYSTEM\SYMBIANSECUREDATA\Tee222SECURITYMANAGER\ Tee222.APP
C:\SYSTEM\SYMBIANSECUREDATA\Tee222SECURITYMANAGER\ Tee222.RSC
C:\SYSTEM\SYMBIANSECUREDATA\Tee222SECURITYMANAGER\ Tee222.SIS
C:\SYSTEM\RECOGS\222.MDL
C:\SYSTEM\INSTALLS\Tee222.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 22.07.2007, 11:08

Risiko: sehr gering
Typ: Wurm
entdeckt am: 22. Dezember 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.H is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only differences are:
The worm spreads as VELASCO.SIS.
The worm creates the file MARCOS.MDL instead of FLO.MDL.
The worm does not display a message after infection.

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.H is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install Velasco?

The worm creates the following files on the phone:

\SYSTEM\APPS\VELASCO\VELASCO.APP
\SYSTEM\APPS\VELASCO\VELASCO.RSC
\SYSTEM\APPS\VELASCO\MARCOS.MDL
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS
C:\SYSTEM\RECOGS\MARCOS.MDL
C:\SYSTEM\INSTALLS\VELASCO.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 22.07.2007, 11:10

Risiko: sehr gering
Typ: Wurm
entdeckt am: 29. Dezember 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.I is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.H.

The only difference is the worm attempts to remove instances of SymbOS.Cabir.

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.I is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install Velasco?

The worm attempts to remove previous version of SymbOS.Cabir by performs the following actions:
Deletes the following files

c:\system\apps\caribe\caribe.app
c:\system\apps\caribe\caribe.rsc
c:\system\apps\caribe\flo.mdl
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.app
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.rsc
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.sis
c:\system\recogs\flo.mdl
c:\system\installs\caribe.sis
c:\system\install\caribe.sis
c:\nokia\installs\caribe.sis
Removes the following folders

c:\system\apps\caribe
c:\system\symbiansecuredata\caribesecuritymanager

The worm creates the following files on the phone:

\SYSTEM\APPS\VELASCO\VELASCO.APP
\SYSTEM\APPS\VELASCO\VELASCO.RSC
\SYSTEM\APPS\VELASCO\MARCOS.MDL
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS
C:\SYSTEM\RECOGS\MARCOS.MDL
C:\SYSTEM\INSTALLS\VELASCO.SIS

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

Hangman · 22.07.2007, 11:13

Risiko: sehr gering
Typ: Wurm
entdeckt am: 22. Dezember 2004
auch bekannt als: keine Angabe

Information:

SymbOS.Cabir.J is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.H.

The only difference is the worm may create the following additional files:
\system\apps\caribe\caribe.app
\system\apps\caribe\flo.mdl
\system\apps\caribe\caribe.rsc

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

technische Details:

SymbOS.Cabir.J is transmitted through Bluetooth as a .SIS file.

When the worm arrives at a target device the following may happen:
The device displays a message similar to the following, asking the user to accept a message from a particular device:

Receive message via Bluetooth from [device name]?

The user will be notified that they have received a new message.

The user will be prompted with a message similar to the following:

Application is untrusted and may have problems. Install only if you trust provider.

If the user chooses Yes, the user will be prompted to install the worm.

Install Velasco?

The worm creates the following files on the phone:

C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC
C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS
C:\SYSTEM\RECOGS\MARCOS.MDL
C:\SYSTEM\INSTALLS\VELASCO.SIS

The worm may create the following additional files:

\system\apps\caribe\caribe.app
\system\apps\caribe\flo.mdl
\system\apps\caribe\caribe.rsc

or

\SYSTEM\APPS\VELASCO\VELASCO.APP
\SYSTEM\APPS\VELASCO\VELASCO.RSC
\SYSTEM\APPS\VELASCO\MARCOS.MDL

The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device.

The worm executes every time the device is turned on.

[Link nur für registrierte Mitglieder sichtbar.]

24.06.2007, 18:31	#1 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir Risiko: sehr gering Typ: Wurm entdeckt am: 15. Juni 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir ist ein Wurm, der über Bluetooth verteilt wird. Er befällt Nokia S60 Mobiltelefone. technische Details: SymbOS.Cabir is a proof-of-concept worm that propagates through Bluetooth-enabled devices. The worm runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones. When the worm is executed, it displays one of the following messages: Caribe-VZ/29a Caribe Mytiti [YUAN] Ni&Ai- The worm then creates the following files on the device: \SYSTEM\APPS\CARIBE\CARIBE.APP \SYSTEM\APPS\CARIBE\CARIBE.RSC \SYSTEM\APPS\CARIBE\FLO.MDL \SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.APP \SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.RSC \SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\CA RIBE.SIS \SYSTEM\RECOGS\FLO.MDL \SYSTEM\INSTALLS\CARIBE.SIS Possible presence of the following files: MYTITI.SIS [YUAN].SIS Ni&Ai-.SIS Norton AntiVirus 2004 Professional.sis The worm then begins scanning for other Bluetooth-enabled devices to send itself to. The worm will attempt to send itself to any Bluetooth devices. The worm will execute every time the device is powered off and back on. It is not currently known if the worm will propagate to other Symbian OS devices. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

24.06.2007, 22:25	#2 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.B Risiko: sehr gering Typ: Wurm entdeckt am: 22. November 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.B is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only difference is SymbOS.Cabir.B displays the following message after infection: Caribe The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. Ertechnische Details: SymbOS.Cabir.B is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install caribe? If the user chooses Install, SymbOS.Cabir is installed and executed, displaying the message: Caribe The worm creates the following files on the phone: \SYSTEM\APPS\CARIBE\CARIBE.APP \SYSTEM\APPS\CARIBE\CARIBE.RSC \SYSTEM\APPS\CARIBE\FLO.MDL C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.APP C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.RSC C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.SIS C:\SYSTEM\RECOGS\FLO.MDL C:\SYSTEM\INSTALLS\CARIBE.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

25.06.2007, 23:11	#3 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.C Risiko: sehr gering Typ: Wurm entdeckt am: 14. Dezember 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.C is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only differences are: The worm spreads as ni&ai-.SIS. The worm displays the following message after infection: ni&ai- The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.C is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install ni&ai-? If the user chooses Install, the worm is installed, executed, and then displays the following message: ni&ai- The worm creates the following files on the phone: \SYSTEM\APPS\ni&ai-\ni&ai-.APP \SYSTEM\APPS\ni&ai-\ni&ai-.RSC \SYSTEM\APPS\ni&ai-\FLO.MDL C:\SYSTEM\SYMBIANSECUREDATA\ni&ai-SECURITYMANAGER\ni&ai-.APP C:\SYSTEM\SYMBIANSECUREDATA\ni&ai-SECURITYMANAGER\ni&ai-.RSC C:\SYSTEM\SYMBIANSECUREDATA\ni&ai-SECURITYMANAGER\ni&ai-.SIS C:\SYSTEM\RECOGS\FLO.MDL C:\SYSTEM\INSTALLS\ni&ai-.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

25.06.2007, 23:14	#4 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.D Risiko: sehr gering Typ: Wurm entdeckt am: 14. Dezember 2004 auch bekannt als: Information: SymbOS.Cabir.D is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only differences are: The worm spreads as MYTITI.SIS. The worm displays the following message after infection: MYTITI The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.D is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install MYTITI? If the user chooses Install, the worm is installed, executed, and then displays the following message: MYTITI The worm creates the following files on the phone: \SYSTEM\APPS\MYTITI\MYTITI.APP \SYSTEM\APPS\MYTITI\MYTITI.RSC \SYSTEM\APPS\MYTITI\FLO.MDL C:\SYSTEM\SYMBIANSECUREDATA\MYTITISECURITYMANAGER\ MYTITI.APP C:\SYSTEM\SYMBIANSECUREDATA\MYTITISECURITYMANAGER\ MYTITI.RSC C:\SYSTEM\SYMBIANSECUREDATA\MYTITISECURITYMANAGER\ MYTITI.SIS C:\SYSTEM\RECOGS\FLO.MDL C:\SYSTEM\INSTALLS\MYTITI.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

22.07.2007, 10:54	#5 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.E Risiko: sehr gering Typ: Wurm entdeckt am: 14. Dezember 2004 auch bekannt als: Information: SymbOS.Cabir.E is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only differences are: The worm spreads as [YUAN].SIS. The worm displays the following message after infection: [YUAN] The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.E is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install [YUAN]? If the user chooses Install, the worm is installed, executed, and then displays the following message: [YUAN] The worm creates the following files on the phone: \SYSTEM\APPS\[YUAN]\[YUAN].APP \SYSTEM\APPS\[YUAN]\[YUAN].RSC \SYSTEM\APPS\[YUAN]\FLO.MDL C:\SYSTEM\SYMBIANSECUREDATA\[YUAN]SECURITYMANAGER\[YUAN].APP C:\SYSTEM\SYMBIANSECUREDATA\[YUAN]SECURITYMANAGER\[YUAN].RSC C:\SYSTEM\SYMBIANSECUREDATA\[YUAN]SECURITYMANAGER\[YUAN].SIS C:\SYSTEM\RECOGS\FLO.MDL C:\SYSTEM\INSTALLS\[YUAN].SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

22.07.2007, 11:02	#6 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.F Risiko: sehr gering Typ: Wurm entdeckt am: 30. Dezember 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.F is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only differences are: The worm spreads as skulls.SIS. The worm creates MOD.MDL instead of FLO.MDL. The worm displays the following message after infection: skulls The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.F is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install skulls? If the user chooses Install, SymbOS.Cabir is installed and executed, displaying the message: skulls The worm creates the following files on the phone: \SYSTEM\APPS\skulls\skulls.APP \SYSTEM\APPS\skulls\skulls.RSC \SYSTEM\APPS\skulls\MOD.MDL C:\SYSTEM\SYMBIANSECUREDATA\SKULLSSECURITYMANAGER\ skulls.APP C:\SYSTEM\SYMBIANSECUREDATA\SKULLSSECURITYMANAGER\ skulls.RSC C:\SYSTEM\SYMBIANSECUREDATA\SKULLSSECURITYMANAGER\ skulls.SIS C:\SYSTEM\RECOGS\MOD.MDL C:\SYSTEM\INSTALLS\skulls.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

22.07.2007, 11:06	#7 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.G Risiko: sehr gering Typ: Wurm entdeckt am: 22. Dezember 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.G is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only differences are: The worm spreads as Tee222.SIS. The worm creates the file 222.MDL instead of FLO.MDL. The worm displays the following message after infection: Tee222 The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.G is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install Tee222? If the user chooses Install, the worm is installed, executed, and then displays the following message: Tee222 The worm creates the following files on the phone: \SYSTEM\APPS\Tee222\Tee222.APP \SYSTEM\APPS\Tee222\Tee222.RSC \SYSTEM\APPS\Tee222\222.MDL C:\SYSTEM\SYMBIANSECUREDATA\Tee222SECURITYMANAGER\ Tee222.APP C:\SYSTEM\SYMBIANSECUREDATA\Tee222SECURITYMANAGER\ Tee222.RSC C:\SYSTEM\SYMBIANSECUREDATA\Tee222SECURITYMANAGER\ Tee222.SIS C:\SYSTEM\RECOGS\222.MDL C:\SYSTEM\INSTALLS\Tee222.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

22.07.2007, 11:08	#8 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.H Risiko: sehr gering Typ: Wurm entdeckt am: 22. Dezember 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.H is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir. The only differences are: The worm spreads as VELASCO.SIS. The worm creates the file MARCOS.MDL instead of FLO.MDL. The worm does not display a message after infection. The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.H is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install Velasco? The worm creates the following files on the phone: \SYSTEM\APPS\VELASCO\VELASCO.APP \SYSTEM\APPS\VELASCO\VELASCO.RSC \SYSTEM\APPS\VELASCO\MARCOS.MDL C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS C:\SYSTEM\RECOGS\MARCOS.MDL C:\SYSTEM\INSTALLS\VELASCO.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

22.07.2007, 11:10	#9 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.I Risiko: sehr gering Typ: Wurm entdeckt am: 29. Dezember 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.I is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.H. The only difference is the worm attempts to remove instances of SymbOS.Cabir. The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.I is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install Velasco? The worm attempts to remove previous version of SymbOS.Cabir by performs the following actions: Deletes the following files c:\system\apps\caribe\caribe.app c:\system\apps\caribe\caribe.rsc c:\system\apps\caribe\flo.mdl c:\system\symbiansecuredata\caribesecuritymanager\ caribe.app c:\system\symbiansecuredata\caribesecuritymanager\ caribe.rsc c:\system\symbiansecuredata\caribesecuritymanager\ caribe.sis c:\system\recogs\flo.mdl c:\system\installs\caribe.sis c:\system\install\caribe.sis c:\nokia\installs\caribe.sis Removes the following folders c:\system\apps\caribe c:\system\symbiansecuredata\caribesecuritymanager The worm creates the following files on the phone: \SYSTEM\APPS\VELASCO\VELASCO.APP \SYSTEM\APPS\VELASCO\VELASCO.RSC \SYSTEM\APPS\VELASCO\MARCOS.MDL C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS C:\SYSTEM\RECOGS\MARCOS.MDL C:\SYSTEM\INSTALLS\VELASCO.SIS The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

22.07.2007, 11:13	#10 (Permalink)
Hangman Administrator Name: Christian Handy: Nokia N95, FuSi Pocket Loox 720 Netzbetreiber: Vodafone Avatare sind nur für MFF-Mitglieder sichtbar! Bike Mania Champion! Registriert seit: 17.04.2006 Ort: Erfurt Beiträge: 3.243 Motto: S*x ist wie Sport: Man spielt 'ne halbe Stunde, schwitzt viel und hofft, daß man nichts ins Auge bekommt. Downloads: 309 Uploads: 305 Abgegebene Danke: 40 Erhielt 400 Danke für 222 Beiträge	[SymbianOS] SymbOS.Cabir.J Risiko: sehr gering Typ: Wurm entdeckt am: 22. Dezember 2004 auch bekannt als: keine Angabe Information: SymbOS.Cabir.J is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.H. The only difference is the worm may create the following additional files: \system\apps\caribe\caribe.app \system\apps\caribe\flo.mdl \system\apps\caribe\caribe.rsc The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range. The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices. technische Details: SymbOS.Cabir.J is transmitted through Bluetooth as a .SIS file. When the worm arrives at a target device the following may happen: The device displays a message similar to the following, asking the user to accept a message from a particular device: Receive message via Bluetooth from [device name]? The user will be notified that they have received a new message. The user will be prompted with a message similar to the following: Application is untrusted and may have problems. Install only if you trust provider. If the user chooses Yes, the user will be prompted to install the worm. Install Velasco? The worm creates the following files on the phone: C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS C:\SYSTEM\RECOGS\MARCOS.MDL C:\SYSTEM\INSTALLS\VELASCO.SIS The worm may create the following additional files: \system\apps\caribe\caribe.app \system\apps\caribe\flo.mdl \system\apps\caribe\caribe.rsc or \SYSTEM\APPS\VELASCO\VELASCO.APP \SYSTEM\APPS\VELASCO\VELASCO.RSC \SYSTEM\APPS\VELASCO\MARCOS.MDL The worm attempts to send itself to other Bluetooth-enabled device that it finds, regardless of the type of device. The worm executes every time the device is turned on. [Link nur für registrierte Mitglieder sichtbar.] __________________ lesen - denken - posten

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)

Themen-Optionen
Druckbare Version zeigen Jemanden per E-Mail auf dieses Thema hinweisen
Ansicht
Linear-Darstellung Zur Hybrid-Darstellung wechseln Zur Baum-Darstellung wechseln