F-Secure Trojan Information Pages : Cdropper.D [Summary] | [Disinfection] | [Detailed Description] | [Detection] Name: Cdropper.D Alias: SymbOS/Cabir.B Category: Trojan Platform: SymbOS Date of Discovery: January 19, 2005 Summary Cdropper.D is Symbian SIS file that will install Cabir.B and Locknut.A components into the device. For more details of Cabir and Locknut, see description: http://www.f-secure.com/v-descs/cabir_b.shtml http://www.f-secure.com/v-descs/locknut_a.shtml Disinfection F-Secure Mobile Anti-Virus will detect the installed Cabir and Locknut variants and delete worm components. After deleting worm files you can use application manager to uninstall the SIS file that dropped the worm. If your phone is infected with Cabir variant and you cannot install files over Bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone Open web browser on the phone Go to http://mobile.f-secure.com Select link "Download F-Secure Mobile Anti-Virus" and select phone model Download the file and select open after download Install F-Secure Mobile Anti-Virus Go to applications menu and start Anti-Virus Scan all files Back to the Top Detailed Description Spreading in server.sis Back to the Top Detection F-Secure Mobile Anti-Virus for Symbian detects this malware starting from the update build number 14. Back to the Top Write-up: Mika Tolvanen Technical Details: Mika Tolvanen, January 17, 2006 Description Updated: Mika Tolvanen, January 17, 2006 F-Secure Corporation