Page 1 of 4 1 2 3 4 LastLast
Results 1 to 15 of 46

Thread: official caribe.sis Q&A (Virus info)

  1. #1
    Join Date
    Mar 2003
    Location
    Greater Puget Sound Area
    Posts
    7,426
    Device(s)
    N95-3
    Carrier(s)
    T-Mobile
    Feedback Score
    0

    official caribe.sis Q&A thread...

    Ok, since I have seen two threads today regarding caribe.sis, i thought i would start a thread where anyone who has any info/experiences/etc. with caribe.sis can post your story and whatnot... this is a rather pointless virus, as it doesn't do much, but still it's no fun to have even a pointless virus on their phones... my intent with this thread is to try and catalog where people have gotten it from, what they have done to get rid of it, etc.

    for example, i know that one user in the phillipines got it in the wild...

    another user said that he got it from a download...

    share your story, and lets see what we can learn.

    PEACE!

    -matt

  2. #2
    Join Date
    Aug 2001
    Location
    Chicago and Yugoslavia
    Posts
    9,974
    Device(s)
    Ericsson: K750i, T68m, R310s (EU)
    Carrier(s)
    US: T-Mobile
    Feedback Score
    0
    i have a 3650 i could use for testing. if seriously given the .sis file, i will look into a method for deleting it without having to format the phone.
    although i don't use it currently, i think i'm familiar enough with the S60 OS to be able to do something like this.

    btw, does this virus "work" on the UIQ version of symbian (p9X0, p800)? I can try it on my p900 to make sure.

  3. #3
    Join Date
    Mar 2003
    Location
    Greater Puget Sound Area
    Posts
    7,426
    Device(s)
    N95-3
    Carrier(s)
    T-Mobile
    Feedback Score
    0
    that's a good question about UIQ... i'm gonna say no off the top of my head, simply because even though it's still symbian, the file systems work differently...

    as for testing, that would be great if you could test it, since it wouldn't be your primary phone you'd be losing out on... and if you could come up with a way to remove without havnig to reformat, you'd be a genius!

    thanks man, keep the ideas coming, and i want to hear some experiences from people.

    -matt

  4. #4
    Join Date
    Aug 2001
    Location
    Chicago and Yugoslavia
    Posts
    9,974
    Device(s)
    Ericsson: K750i, T68m, R310s (EU)
    Carrier(s)
    US: T-Mobile
    Feedback Score
    0
    if any of you locate a copy of the .sis file, PM me. i don't think we want it spreading more than it has already, assuming the phillipines guy's story is true.

  5. #5
    Join Date
    Jun 2004
    Location
    भारत
    Posts
    1,934
    Device(s)
    Blackberry Torch
    Carrier(s)
    Vodafone
    Feedback Score
    0
    Originally posted by punkserb
    if any of you locate a copy of the .sis file, PM me. i don't think we want it spreading more than it has already, assuming the phillipines guy's story is true.



    i am starting to wonder why u want it so desperately

  6. #6
    Join Date
    May 2004
    Location
    Philippines
    Posts
    382
    Device(s)
    Nokia N82 (RM-313)
    Carrier(s)
    Globe Telecom (Philippines)
    Feedback Score
    0

  7. #7
    Join Date
    Sep 2004
    Location
    Dallas
    Posts
    56
    Device(s)
    Nokia 6680 (Black Version)
    Carrier(s)
    T-Mobile USA
    Feedback Score
    0
    I thought u guyz might wanna check this out -

    Caribe Virus Removal Instructions

    My phone had got infected with this virus but with the help of these instructions and the Seleq FileExplorer i was able to delete all its files this virus was running in the background but i still cant get rid of the blank icon its displaying in my menu. Also when i goto Manager to see a list of apps, it still shows caribe and would not delete it but instead ends up closing my Manager program.

    This icon really bothers me and im afraid it could infect my phone with this virus again or it still may be infected. Atleast now it does not show caribe loading up when i reset the phone.

    Please Helpp !!! Thnx in advance ...
    I Live, Eat and Breathe
    Cell Fones !!!

  8. #8
    Join Date
    Aug 2001
    Location
    Chicago and Yugoslavia
    Posts
    9,974
    Device(s)
    Ericsson: K750i, T68m, R310s (EU)
    Carrier(s)
    US: T-Mobile
    Feedback Score
    0
    has anyone gotten a 3650 infected on it? since that's all i'll be able to test on. but i think i could do this...just use the symbian sdk to see what resources it uses and where it might hide itself and i think this can be solved...

  9. #9
    Join Date
    Sep 2004
    Location
    Dallas
    Posts
    56
    Device(s)
    Nokia 6680 (Black Version)
    Carrier(s)
    T-Mobile USA
    Feedback Score
    0
    Check this out -

    Caribe Removal Tool

    Tool to disinfect your phone. I'm going to try this myself on my Nokia 6600 which right now is infected. Ill keep you guys updated. Hope this works !!

  10. #10
    Join Date
    Aug 2001
    Location
    Chicago and Yugoslavia
    Posts
    9,974
    Device(s)
    Ericsson: K750i, T68m, R310s (EU)
    Carrier(s)
    US: T-Mobile
    Feedback Score
    0
    cool! let us know how it works!

  11. #11
    Join Date
    Nov 2003
    Location
    EastVan
    Posts
    10,072
    Device(s)
    bunch of phones
    Carrier(s)
    fido
    Feedback Score
    0
    IMPORTANT NOTE:

    Caribe.sis virus is propagated via BT, so the BEST CURE IS STILL PROTECTION, hence:

    1) If your BT is ON, make sure that your phone visibility is set to "HIDDEN", that way nobody can Bluejack you.

    2) The Best BT Security is, if your not using your BT, then TURN IT OFF

    3) If for instance, that you did not do all of the above, and for some reason, somebody you dont know is sending you something via BT, simply REJECT it.

  12. #12
    Join Date
    Sep 2004
    Posts
    82
    Feedback Score
    0
    this is the easiest way to remove it
    Removal
    Kaspersky Labs has developed a utility to remove Cabir.a from infected handsets.

    The utility will detect and delete the worm from Nokia 3650 and 6600, and Siemens SX1 handsets. It is also designed to work on Nokia N-Gage and Sony Ericsson P900 handsets, but it has not been tested on these handsets.

    The utility can be found on the WAP site wap.kaspersky.com. It can be downloaded either directly from the WAP site or via the Internet by following the link wap.kaspersky.com/downloads/decabir-1.0.sis

    How to use the utility:
    upload the installation file, decabir.sis, to the handset, and launch it.
    choose the Decabir icon in the main menu
    if the handset is not infected, the message 'Device is clean' will be displayed.
    if the handset is infected, the message 'Cabir has been removed. Please reboot' will be displayed. You should now switch your handset off and on again.

    http://wap.kaspersky.com/downloads/decabir-1.0.sis



    website

  13. #13
    Join Date
    Mar 2003
    Location
    Greater Puget Sound Area
    Posts
    7,426
    Device(s)
    N95-3
    Carrier(s)
    T-Mobile
    Feedback Score
    0
    good find, thank you UAE... but does this solve the prolbem that was mentioned above about the Cabir icon still sitting there on your phone?

    thanks for the info!
    -matt

  14. #14
    Join Date
    Sep 2004
    Posts
    82
    Feedback Score
    0
    yes it should solve that problem

  15. #15
    Join Date
    Mar 2003
    Location
    Greater Puget Sound Area
    Posts
    7,426
    Device(s)
    N95-3
    Carrier(s)
    T-Mobile
    Feedback Score
    0
    good!

    just as an aside, i still would like to hear people's experiences of where they got the virus, etc... particularly those that downloaded it somewhere... if people are attaching this as malware to other programs, might as well know that to avoid it.

    PEACE!

    -matt

Page 1 of 4 1 2 3 4 LastLast

Bookmarks