Discovered: December 22, 2004
Updated: February 13, 2007 12:31:35 PM
Type: Worm
Systems Affected: EPOC
To remove SymbOS.Cabir.H:
- Install a file manager program on the phone.
- Enable the option to view the files in the system directory.
- Search the drives, A through Y, for the \SYSTEM\APPS\VELASCO directory.
- Delete the files VELASCO.app, VELASCO.rsc, and MARCOS.MDL from the \VELASCO directory.
- Go to the C:\SYSTEM\SYMBIANSECUREDATA\VELASCO directory.
- Delete the files VELASCO.app, VELASCO.rsc, and VELASCO.SIS.
- Go to the C:\SYSTEM\RECOGS directory.
- Delete the file, MARCOS.MDL.
- Go to the C:\SYSTEM\INSTALLS directory.
- Delete the file, VELASCO.SIS.
Note: You cannot delete the file VELASCO.rsc when the program is running.
If you cannot delete this file in steps 4 and 6, delete all the files that you can, restart the phone, and then delete the VELASCO.rsc file.
Writeup By: Robert X Wang