SymbOS.Mabir - Removal

Risk Level 1: Very Low

Printer Friendly Page

Discovered: April 4, 2005
Updated: February 13, 2007 12:36:20 PM
Also Known As: Mabir.A [F-Secure], SYMBOS_MABIR.A [Trend Micro]
Type: Worm
Systems Affected: EPOC


  1. Install a file manager program on the device.

  2. Enable the option to view the files in the system folder.

  3. Navigate to the following folder:

    \SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER

  4. Delete the following files:

    • CARIBE.APP
    • CARIBE.RSC
    • CARIBE.SIS
    • INFO.SIS
    • INFO.SIS

  5. Navigate to the following folder:

    \SYSTEM\RECOGS

  6. Delete the following file:

    FLO.MDL

  7. Exit the file manager.


Writeup By: Eric Chien
Search by name
Example: W32.Beagle.AG@mm
Limited Time Offers! Save up to 50%
Windows Vista Security