Read-only archive of the All About Symbian forum (2001–2013) · About this archive

Help!!!!

10 replies · 3,979 views · Started 15 November 2004

hello,

i bought the nokia 6260 mobile phone 3days ago, but somehow i received a file via bluetooth called caribe, this file can really mess up your bluetooth connection as whenever you turn it on it sends it self to all the people having their bluetooth enabled and when you try to remove it from the file manager it automatically reinstall itself again.

What happened is that i removed the Virus by formatting both the memory card and the phone. whats happening now is that i think i removed files from the memory card that has something to do with the connection because now i can only receive or dial calls for two seconds, exactly two seconds and then im out.

Please advise

Regards

hope this helps...

REMOVAL INSTRUCTION:
To remove SymbOS.Cabir:

1.Install a file manager program on the phone.
2.Enable the option to view the files in the system directory.
3.Search the drives, A through Y, for the \\SYSTEM\\APPS\\CARIBE directory.
4.Delete the files CARIBE.APP, CARIBE.RSC, and FLO.MDL from the \\CARIB directory.
5.Go to the C:\\SYSTEM\\SYMBIANSECUREDATA\\CARIBESECURITYMANAGER directory.
6.Delete the files CARIBE.APP, CARIBE.RSC, and CARIBE.SIS.
7.Go to the C:\\SYSTEM\\RECOGS directory.
8.Delete the file, FLO.MDL.
9.Go to the C:\\SYSTEM\\INSTALLS directory.
10.Delete the file, CARIBE.SIS.

Note: You cannot delete the file CARIBE.RSC when the program is running.
If you cannot delete this file in steps 4 and 6, delete all the files that you can, restart the phone, and then delete the CARIBE.RSC file.

-Nay

the caribe virus is not a true virus, it doesnt really harm the phone, it is really a proof of concept piece of software. ok, it does try to send itself to other bluetooth enabled devices, but you actually have to accept the incoming file.

anyway, my point is that formatting the phone should not have screwed up your ability to make calls, unless the format "instructions" that are in the phone firmware are screwed. try reformatting again. there shouldnt be anything on the memory card that would have anything to do with the calls, after all, the mmc can be removed any time you want.

hope you get it sorted.

Dan.

Dan got it very wrong !!! The Virus/Worm first destroys your battery and then slowly degrades the ability of the underlying software system. If you enjoy buyinga battery every two days, then ALWAYS install it!

George Kerley wrote:Dan got it very wrong !!! The Virus/Worm first destroys your battery and then slowly degrades the ability of the underlying software system. If you enjoy buyinga battery every two days, then ALWAYS install it!

did i?

well then perhaps you could explain to me how a piece of software destroys the battery?

does it create a chemical imbalance that renders the battery unable to store charge? i guess no.

does it infect the battery operating system? er...no.

could it short circuit the battery whilst in the phone? not unless the virus can re-route the tracks on the circuit boards.

it may well drain battery quicker because the "virus" hammers the bluetooth connection trying to replicate to other handsets. but physically destroy the battery? i think not.

the "virus" can be safely removed by deleting a few files that relate to the caribe virus only.

c:\system\apps\caribe\caribe.rsc
c:\system\apps\caribe\caribe.app
c:\system\apps\caribe\flo.mdl
c:\system\recogs\flo.mdl
c:\system\symbiansecuredata\caribesecuritymanager\caribe.app
c:\system\symbiansecuredata\caribesecuritymanager\caribe.rsc

all stored in phone memory. "underlying software system" files all live in the phone's ROM.

if the caribe virus is SO DANGEROUS, why then, does none of the anti virus sites list the side effects that you state?

see here:

http://securityresponse.symantec.com/avcenter/venc/data/epoc.cabir.html

note the second paragraph "There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices."

and here:

http://www.f-secure.com/v-descs/cabir.shtml

so in conclusion, no, i dont think i did get it very wrong.

mods, please excuse the angle i took in response, the cabir "virus" is a self replicator, and thats it. nothing else. i know i'm new to the site, but i am not new to series60 handsets. i didnt appreciate the unsubstantiated comments aimed at myself, and i dont like the "scaremongering" that George was creating. take all the action you feel necessary. Dan.

dansansome wrote:the caribe virus is not a true virus, it doesnt really harm the phone, it is really a proof of concept piece of software. ok, it does try to send itself to other bluetooth enabled devices, but you actually have to accept the incoming file.

anyway, my point is that formatting the phone should not have screwed up your ability to make calls, unless the format "instructions" that are in the phone firmware are screwed. try reformatting again. there shouldnt be anything on the memory card that would have anything to do with the calls, after all, the mmc can be removed any time you want.

hope you get it sorted.

Dan.

SOMOBODY POSTED THIS ON THE SITE

the "virus" can be safely removed by deleting a few files that relate to the caribe virus only.

c:\system\apps\caribe\caribe.rsc
c:\system\apps\caribe\caribe.app
c:\system\apps\caribe\flo.mdl
c:\system\recogs\flo.mdl
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.app
c:\system\symbiansecuredata\caribesecuritymanager\ caribe.rsc

THE PROBLEM NOW IS HOW DO I GET TO THIS FILLES.
PLS E MAIL ME AT [email][email protected][/email]
MY 6600 IS DYING

you have to use a third party explorer program such as seleq or fexplorer so that you can view all the files/folders on the phone, rather than use the built in file manager, which only lets you see what nokia want you to be able to see.

dansansome wrote:
mods, please excuse the angle i took in response, the cabir "virus" is a self replicator, and thats it. nothing else. i know i'm new to the site, but i am not new to series60 handsets. i didnt appreciate the unsubstantiated comments aimed at myself, and i dont like the "scaremongering" that George was creating. take all the action you feel necessary. Dan.

And i thought i wuz a PHD ! :tongue: well dan i guess .. err well i positively think that what ever explaination u gave wuz perfect ... i too agree with the fact that its not an actual virus .. but sumwhat similar .. norton would be commin up with a symbian edition soon i hope lol ..
Well one thing noticed in the virus .. when i actually d'loaded it and installed it 😃 (jobless) i know .. but yes .. the virus did have one capability of connecting to GPRS .. now i duno if its my operator settings or the virus .. but the G used to be switched on even after i closed the connection .. its like a force redial ..
newayz .. thanks for the detailed info .. versed me a lil 😊

aww and abt the formating mmc n phone .. well always format the phone first then the mmc 😊

Cheers :icon14:

dhanesh wrote:And i thought i wuz a PHD ! :tongue: well dan i guess .. err well i positively think that what ever explaination u gave wuz perfect ... i too agree with the fact that its not an actual virus .. but sumwhat similar .. norton would be commin up with a symbian edition soon i hope lol ..
Well one thing noticed in the virus .. when i actually d'loaded it and installed it 😃 (jobless) i know .. but yes .. the virus did have one capability of connecting to GPRS .. now i duno if its my operator settings or the virus .. but the G used to be switched on even after i closed the connection .. its like a force redial ..
newayz .. thanks for the detailed info .. versed me a lil 😊

aww and abt the formating mmc n phone .. well always format the phone first then the mmc 😊

Cheers :icon14:

😊 someone finally commented! :shakehand

although my comments above may have been seen as mild flaming, i was just irritated by the allegations and i felt i needed to PROVE that i wasnt wrong. anyways. back on topic...

bit of an odd one about the GPRS connection, did you ever find out what it was trying to connect to/send/receive whilst it did that?

did you remove cabir by format or just deleting the files listed above?

Nothing to be sorry about dansansome.The hype of this so called "viruses" which are nothing more but maliciously coded applications is caused by people like George Kerley and antivirus companies trying to make a quick buck.I wonder who George Kerley works for. 😊

dansansome wrote:😊 someone finally commented! :shakehand

although my comments above may have been seen as mild flaming, i was just irritated by the allegations and i felt i needed to PROVE that i wasnt wrong. anyways. back on topic...

bit of an odd one about the GPRS connection, did you ever find out what it was trying to connect to/send/receive whilst it did that?

did you remove cabir by format or just deleting the files listed above?

Well ... the GPRS wuz with a box around it alrite so it wuz sedin or recieving stuff .. now i duno how do i check what data wuz sent or received .. but as i installed it my self just to check out the virus .. i removed it using the format as well as manual and a smart uninstaller i got from sum site ... the manual removal worked cause the phone wuz normal as b4 .. but format wuz like a lil weird cause i had problems accessing the mmc .. and one more format would do the trick .. the unstall proggy need a format anyways cause all installed apps caused error .. even the camera use to cause error and close ...
well i guess this wuz pretty it .. the situation of the virus on a n3660 ... m noot messin with my 6260 now :P lol ...

l8erz ...