MOBILE STUFF IN

Malicious software in nokia series 60 devices

There have been some consumer complaints that malware has infected their nokia Series 60 device. Consumer awareness is essential to prevent malware to spread from device to device.Disinfection can be done in several ways depending on the type of malware. In most cases disinfection can be done by the consumer e.g. with 3rd party anti-virus SW. In most of the cases the repair action is formatting of user data.

Note: The malware is not spread over mobile networks.
Instructions to be provided to the consumer after the disinfection:
The following instructions should be provided to the consumer after the fix to ensure their device is not affected again.
- Turn Bluetooth on only when needed
- Set Bluetooth �Hidden� mode as default, use �Shown to all� only when needed
- Do not receive any unknown messages/objectives via Bluetooth
.- Do not install any �unknown� or �untrusted� applications unless you know exactly what they are and from where they are.
One example of above-mentioned malware (worm called CABIR or CARIBE). The example worm is not the only malware causing infection, but the methods to fix the infected device are similar as in example malware.

One example of malware is SW worm called CABIR or CARIBE, which spreads through Bluetooth-enabled devices as CARIBE.SIS file. The worm sends a copy of itself to visible �Show to all� Bluetooth devices However the worm will not affect the device unless the consumer takes the active step of accepting it.
Additionally the worm cannot find devices in which Bluetooth is switched to �Hidden� mode, or those in which Bluetooth is switched �off�.

Methods to fix infected device:

Install and run 3rd party Anti-Caribe SW, which can be found e.g. on FSecure web pages (F-Secure Mobile Anti-Virus: http://mobile.fsecure.com)If step 1 fails, format the device by pressing *#7370# on keypad. Note that all user data will be lost.If steps 1 and 2 fail, format and re-flash the device.Note: The Cabir files can be stored also to the memory card. In that case format also memory card.
User setting backup/restore:
Customer is recommended to use PC Suite for backup.Backup and restore phone memory to MMC must not be used.Otherwise the malware might possibly be written back to the device