Sophos

Symb/Cabir-C

Category
Type
What to do
Prevalence low high

Summary

 
Included in our products from February 2005 (3.90)
Protection available since 10 December 2004 21:51:07 (GMT)
Detected by All Sophos products

More Information

Symb/Cabir-C spreads as a Symbian SIS package named [YUAN].sis. The package contains the following components extracted to ./System/Apps, ./System/[YUAN]SECURITYMANAGER and ./System/Recogs:

./system/apps/[YUAN]/flo.mdl
./system/apps/[YUAN]/[YUAN].rsc
./system/apps/[YUAN]/[YUAN].app
./system/[YUAN]SECURITYMANAGER/[YUAN].rsc
./system/[YUAN]SECURITYMANAGER/[YUAN].app
./system/[YUAN]SECURITYMANAGER/[YUAN].sis
./system/RECOGS/flo.mdl

Flo.mdl is a DLL that uses the EZBoot mechanism to attempt to launch the Symb/Cabir-C application file [YUAN].app when the device is powered on.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer