SymbOS.Cabir.H - Removal

Risk Level 1: Very Low

Printer Friendly Page

Discovered: December 22, 2004
Updated: February 13, 2007 12:31:35 PM
Type: Worm
Systems Affected: EPOC


To remove SymbOS.Cabir.H:
  1. Install a file manager program on the phone.
  2. Enable the option to view the files in the system directory.
  3. Search the drives, A through Y, for the \SYSTEM\APPS\VELASCO directory.
  4. Delete the files VELASCO.app, VELASCO.rsc, and MARCOS.MDL from the \VELASCO directory.
  5. Go to the C:\SYSTEM\SYMBIANSECUREDATA\VELASCO directory.
  6. Delete the files VELASCO.app, VELASCO.rsc, and VELASCO.SIS.
  7. Go to the C:\SYSTEM\RECOGS directory.
  8. Delete the file, MARCOS.MDL.
  9. Go to the C:\SYSTEM\INSTALLS directory.
  10. Delete the file, VELASCO.SIS.


    Note: You cannot delete the file VELASCO.rsc when the program is running.

    If you cannot delete this file in steps 4 and 6, delete all the files that you can, restart the phone, and then delete the VELASCO.rsc file.


Writeup By: Robert X Wang
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security