Virus se KINITO...

mikaha

Δημοσ. 12 Δεκεμβρίου 2004

Gia windows mobile 2003 kai gia pocket pc yparxei to Airscanner Mobile AntiVirus Pro - http://www.download.com/Airscanner-Mobile-AntiVirus-Pro/3000-2178_4-10315814.html?tag=lst-0-1

Gia symbian series 60:

http://my-symbian.com/7650/applications/applications.php?faq=37&fldAuto=1042

http://my-symbian.com/7650/applications/applications.php?faq=37&fldAuto=973

V@nt-

Δημοσ. 17 Δεκεμβρίου 2004

Άντε, σε λίγο καιρό θα χρειαζόμαστε και firewall, antispy κτλ...

philos

Δημοσ. 19 Δεκεμβρίου 2004

kleiste apo to taskman tou kinhtou to caribe (kratwntas patimeno to pliktro menu kai me to FExplorer (file manager) an psaxete ligo sto katalogo c:/system/.......tha entopisete poli eukola to fakelo tou virus,an ton entopisete ton diagrafete kai kanete restart sto kinhto.

Aussieguy84

Δημοσ. 19 Δεκεμβρίου 2004

kai egw tin eixa patisei pedia me afti tin aideia se ena nokia 6600 pou eixa kai to diegrapsa apo ton katalogo tou kinitou. Thelei prosoxi kai na min dexomaste oti mas stelnoune! Pantws kai me mia anavathmisi h akoma kalitera me ena format iparxei lysi.

k_w_t

Δημοσ. 20 Δεκεμβρίου 2004

kai pws 8a tou kanw format???

Tsiolas

Δημοσ. 30 Δεκεμβρίου 2004

or me ena kalo process viewer, pisteuo tou kaneis ena oraio kill process kai meta me enan kalo file manager diagrafeia ta arxeia tou (gia proxorimenous xristes mono pou xeroun ti kanoun)

aGka8l

Δημοσ. 1 Ιανουαρίου 2005

xaxa!egw ekei p ka8omuna me tin parea m gia kafe vlepw tin o8oni tu kinitou m na anavei!kai vlepw kapios na m stelenei me bluetooth pataw apodoxi ke meta vlepw ena arxeio CARIBE.SIS e den imuna xazos to ixa diavasei gia ton iio!paw sto seleq to kanw rename se mp3player.sis alazw to onoma tis siskevis m sto bluetooth to kanw krifo kai to estila ston pipa p m to estile!an krinw apo tin fatsa tu kai ton filwn tu nomizw pos ton ipie stegna xaxa

philos

Δημοσ. 2 Ιανουαρίου 2005

to caribe.sis den stelenete me th thelhsh tou alounou dld ama sou erthei kapoio to arxeio caribe.sis de sto stelnei o epithdes, ektos kai an einai kapios mal***as kai to stelnei epithdes xwris na to exei egatasthsei sto kinhto tou gnwrizontas to kindino.

ydrokinisi

Δημοσ. 7 Ιανουαρίου 2005

Κατεβαστε αυτο το αρχειθο και τρεξτε το στο κινητο σας. Θα βρει τον ιο και θα τον σβησει. Δεν χανετε κανενα αρχειο.

http://www.techteam.gr/phpBB2/dload.php?action=file&id=573

super moderator member

Δημοσ. 8 Ιανουαρίου 2005

November 19th 2004, Symbian press release

Information about suspected “Extended Theme” malware

Symbian takes security issues very seriously and works closely with the security community to develop and integrate the most advanced security features for Symbian OS. Through its co-operation with the security community, Symbian has been made aware of a malware that has been distributed through one or more shareware sites. It is Symbian’s understanding that the malware is no longer being distributed.

The malware is targeted at the Nokia 7610 but may affect some other phones using the Series 60 User Interface. Symbian OS phones using the UIQ user interface platform (Sony Ericsson, Motorola, BenQ, Arima) or the NTT DoCoMo FOMA platform (Fujitsu) are believed to be unaffected by this malware.

The malware was distributed in an application installation file, (Extended Theme.sis or similarly named), that purports to create new themes (background picture, icons etc) for the Nokia 7610. The trojan has been reported as being distributed as a zipped file called 7610.extended.theme.manager.zip.

To be affected by the malware requires a phone user to deliberately install it as an application onto their phone. The malware cannot be installed without repeated user intervention, including ignoring a security warning. The malware does not appear to have the ability to distribute itself to other phones. The malware, once installed, replaces the standard application icons with icons that look like skulls and locks the phone's menu so as to restrict the phone to receiving and making calls.

Symbian and Nokia are investigating this matter further and Symbian will update the information below as soon as possible.

click here for more information

Extended Theme”malware

The malware, a trojan, is hidden in an application installation file, Extended Theme.sis, that purports to create new themes for the Nokia 7610. The trojan has been recorded as being distributed as a zipped file called 7610.extended.theme.manager.zip.

The malware requires a phone user to install it as an application onto their phone. The malware cannot be installed without repeated user intervention and does not appear to be able to distribute itself.

Summary information and advice

The malware is believed to target the Nokia 7610 and only affect phones using the Series 60 User Interface platform.

Phones that use the UIQ user interface platform (Sony Ericsson, Motorola, BenQ, Arima) or the NTT DoCoMo FOMA platform (Fujitsu) are believed to be unaffected by this malware.

The only way a phone can be affected by this malware is by the user downloading the malware file, believed to called “extended theme.sis” or “extended theme manager.sis” and installing it on their phone.

To install the file the user has to ignore two security warnings.

If the user successfully installs the malware, the phone’s functionality may be restricted to the phone receiving and making calls with other.

Symbian's view on malware

Symbian takes security issues extremely seriously and works constantly to develop and integrate the most advanced security features for Symbian OS. Symbian believes that mobile security is the responsibility of the entire industry. It requires co-operation and trust – values the Symbian OS open approach encourages.

Symbian is working closely with handset manufacturers and network operators to educate users on how to avoid installing malware and guide them towards downloading applications from trusted sources only.

Symbian also provides the required infrastructure for security and works with partners, licensees, network operators and standards bodies to further ensure security needs of the market are met. No system for security can be guaranteed 100%. However, Symbian has measures in place to minimise the potential for a widespread attack focused on Symbian OS phones.

Symbian has led an industry-wide initiative to develop the Symbian Signed program under which software applications designed for Symbian OS are signed with a tamper-proof digital certificate that validates the identity of the application's developer, thus discouraging the installation of unsigned applications. Symbian anticipates that adoption of Symbian Signed will be widespread and will represent a significant barrier to the distribution of malware.

Questions and Answers about the extended theme manager trojan and Symbian OS security

Q – What is a trojan?

A – A trojan is malware hidden inside other – apparently innocent – software.

Q – How do I know if my phone is affected by this trojan?

A – If you have downloaded the Extended Theme sis file and have installed it on your Series 60 phone, your phone is at risk.

Q – How can I avoid my phone being affected by this trojan?

A – Your phone can only be affected if you have downloaded and installed the .sis file onto your Series 60 phone.

Q – How can I protect my phone from other types of malware?

A – Mobile phone users can protect their phone from harmful applications by following the simple measures:

Only download applications and content – preferably Symbian Signed – from trusted sources such as network operator or handset manufacturer web portals

If your device gives a security warning during installation it means that the content is not Symbian Signed. If this is the case you should consider carefully whether the application or content has been created by a trustworthy source, particularly if you have received the application or content from another phone via infra-red or Bluetooth® wireless technology.

Q – How is Symbian OS protected from malware?

A – Symbian OS provides a number of elements that make it secure. This includes protection from malware through signature checks and features that enable virus scanners from leading anti-virus vendors.

Q – Open phones means open to viruses, aren't Symbian OS phones susceptible to viruses?

A – An open programming environment can attract both benevolent and (the very small minority of) malicious developers. Symbian OS minimizes the risk of attack by advanced security within the OS itself and the use of application signing schemes (Symbian’s or those of network operators and licensees) and through the use of virus scanners (produced by partners).

Q – What is Symbian doing to prevent viruses or trojans in the future?

A – Symbian takes security issues very seriously and works constantly to develop and integrate the most advanced security features for Symbian OS. Symbian believes that mobile security is the responsibility of the entire industry. It requires co-operation and trust – values the Symbian OS open approach encourages. Symbian provides the required infrastructure for security and works with partners, licensees, network operators and standards bodies to further ensure security needs of the market are met. No system for security can be guaranteed 100%. However, Symbian has measures in place to minimize the chance of a widespread attack focused on Symbian OS devices.

Symbian OS provides the following elements in security for protection from malware (viruses, trojans, worms, etc):

Symbian provides an infrastructure which allows network operators and manufacturers to use application signing (and revocation) for applications which are used on their Symbian devices. This allows the creation of application signing programs which can be used to verify the integrity of applications before allowing their use on the handsets

Symbian has led an industry-wide initiative to develop the Symbian Signed program under which software applications designed for Symbian OS are signed with a tamper-proof digital certificate that validates the identity of the application's developer, thus discouraging the installation of unsigned applications. Symbian anticipates that adoption of Symbian Signed will be widespread and will represent a significant barrier to the distribution of malware

Virus scanners through enabling partners – Symantec, F-Secure, McAfee and other major anti-virus technology vendors.

super moderator member

Δημοσ. 8 Ιανουαρίου 2005

UPDATED VIRUS WARNING - Διαφορες εκδοσεις του SymbOS.Cabir

-SymbOS.Cabir.B

SymbOS.Cabir.B is a proof-of-concept worm that replicates on Series 60 phones. The worm is a minor variant of SymbOS.Cabir.

The only difference is SymbOS.Cabir.B displays the following message after infection:

Caribe

The worm repeatedly sends itself to the first Bluetooth-enabled device that it can find, regardless of the type of device. For example, even a Bluetooth-enabled printer will be attacked if it is within range.

The worm spreads as a .SIS file, which is installed into the APPS directory. There is no payload, apart from the vastly shortened battery life caused by the constant scanning for Bluetooth-enabled devices.

-SymbOS.Cabir.C

The only differences are:

* The worm spreads as ni&ai-.SIS.