F-Secure: Be Sure
Main
F-Secure Logo - Be Sure
Select local site


Privacy Policy
Legal Notices
Contact Us

F-Secure Virus Descriptions : Cabir.S

[Summary] | [Disinfection] | [Detailed Description] | [Detection]



NAME:Cabir.S
ALIAS:SymbOS/Cabir.S, EPOC/Cabir.S, Worm.Symbian.Cabir.S, guan4u virus

Summary

Cabir.S is a minor variant of Cabir.B the only significant difference is that Cabir.S Spreads in guan4u.SIS while Cabir.B uses Caribe.sis

For more details, see description of Cabir.A http://www.f-secure.com/v-descs/cabir.shtml

Disinfection

Disinfection

F-Secure Mobile Anti-Virus will detect the Cabir.S and delete the worm components. After deleting worm files you can delete this directory: c:\system\symbiansecuredata\guan4usecuritymanager\

If your phone is infected with Cabir.S and you cannot install files over bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone

1. Open web browser on the phone
2. Go to http://mobile.f-secure.com
3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
4. Download the file and select open after download
5. Install F-Secure Mobile Anti-Virus
6. Go to applications menu and start Anti-Virus
7. Activate Anti-Virus and scan all files


Back to the Top


Detailed Description

Cabir.S is minor hexedit variant of Cabir.B, with the exception of new filename Cabir.S behaves identically Cabir.B


Back to the Top


Detection

Generic detection that detects Cabir.S was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in database build number 15.

Exact detection that shows correct variant letter published on January 19th, 2004 in database build number 26.


Back to the Top


Write-up: Jarno Niemela January 19th, 2005;

Variant letter syncronized with other AV companies: Jarno Niemela January 19th, 2005;

F-Secure Corporation