Esato

Forum > General discussions > General > .sis file received anonymously. Virus?

12  Next
Author .sis file received anonymously. Virus?
aka Dus
Xperia Arc Black
Joined: Feb 23, 2006
Posts: 217
PM
Posted: 2006-02-23 10:06
Reply with quoteEdit/Delete This PostPrint this post
Hi Guys,

Yesterday I received a .sis file from an anonymous sender over the air. HAd a numeric filename - 0496704987.sis or something - and was about 1.5 megs I think.

As I understand it, .sis files are Symbian game files?

Do you think it was a virus? I rejected it in any case...

dw
T68i
Joined: Mar 13, 2002
Posts: > 500
From: Sweden
PM, WWW
Posted: 2006-02-23 10:22
Reply with quoteEdit/Delete This PostPrint this post
Its not just games that use .sis other applications for symbian also use it.
You did the right thing rejecting it though.
Just as one never should run files recieved by email that your not 100% sure about.
PeterKay
W995 Silver
Joined: Jul 08, 2003
Posts: > 500
From: The Ummah
PM, WWW
Posted: 2006-02-23 10:30
Reply with quoteEdit/Delete This PostPrint this post
Before installing any sis file, you must ensure it is safe and virus free.

Many applications are available from the my symbian website.
JK
W995 Red
Joined: Feb 24, 2005
Posts: > 500
From: S. Africa - JOZI
PM
Posted: 2006-02-23 10:49
Reply with quoteEdit/Delete This PostPrint this post
Depending what phone u using it doesnt matter it wont work(K750) it just saves in "other" and cant open anyway...
Frubin
HTC Desire
Joined: Sep 02, 2004
Posts: > 500
From: London, England, UK
PM, WWW
Posted: 2006-02-23 11:09
Reply with quoteEdit/Delete This PostPrint this post
@ aka Dus: The same thing happened to my boyfriend on his Nokia 6600. He received a strange sis from a Nokia 3650 called "nx30oeoq.sis" and he wondering what it is. I told him not to open or install it as i was suspicious it may be a "SymbOs virus". Lucky he didn't install it as after posting a topic on here ( http://www.esato.com/board/vi[....].php?topic=112657#post1535660) and with the replies i got, i was right that it was indeed a SymbOs virus!
_________________


[ This Message was edited by: Frubin on 2006-02-23 10:10 ]
aka Dus
Xperia Arc Black
Joined: Feb 23, 2006
Posts: 217
PM
Posted: 2006-02-23 11:20
Reply with quoteEdit/Delete This PostPrint this post
Thanks all for the Reply.

I guess people should really take care. It was kinda intriguining cos it was the first time that ever happened to me. Glad I didn't,.

aka Dus
Xperia Arc Black
Joined: Feb 23, 2006
Posts: 217
PM
Posted: 2006-02-23 11:24
Reply with quoteEdit/Delete This PostPrint this post
Frubin, just realised I had my bluetooth turned on. That's probably how it came in (w800).

I was on a Bus at the time - you think it was from someone else's phone on the bus, or from a passer by...? Kinda mind boggly!

Frubin
HTC Desire
Joined: Sep 02, 2004
Posts: > 500
From: London, England, UK
PM, WWW
Posted: 2006-02-23 11:25
Reply with quoteEdit/Delete This PostPrint this post
@ aka Dus: Ah. I strongly advise not to keep your bluetooth kept on all the time then as it is likely to invaded by other phone's bluetooth devices, expecially those which are already infected with a SymbOs virus and trying to spead themselves without the owner knowing and will try to affect your phone even its not a SymbOs based! My boy-friend has his bluetooth switched on when he received the unknown *.sis. He has his bluetooth switched off all the time now. I also keep mine switched off on my W800i.

I have noticed on public places like on the bus, tube etc how many people do have thier bluetooth switched on (properly without them knowing its even on!) and managed to bluejack some of thier phones by sending things from my phone like pictures, ringtones etc. Some even have accept them! So as you can see people who do have thier bluetooth switched on all the time are very vunerable to bluetooth attacks (even harmless ones!)

I do admit bluejacking is fun as well as i remember once i sent a funny-adult type *.wav ringtone while i was on the bus and someone with a SE K608i recieved it. It was the person was sitting right next to me as he played it and i almost cracked up laughing but lucky i had my earphones plugged in the phone listening to the radio on the time so it looked like i was listening to something amusing on my phone! *grin*
_________________
http://toons.artie.com/alphab[....]vonne-magenta-on-white-url.gif

[ This Message was edited by: Frubin on 2006-02-23 10:42 ]
aka Dus
Xperia Arc Black
Joined: Feb 23, 2006
Posts: 217
PM
Posted: 2006-02-23 12:40
Reply with quoteEdit/Delete This PostPrint this post
Quote:

On 2006-02-23 11:25:11, Frubin wrote:
@ aka Dus: Ah. I strongly advise not to keep your bluetooth kept on all .....

.....so it looked like i was listening to something amusing on my phone! *grin*




LOL!!

I use my Bluetooth Headset quite a lot though, so it wouldn't be unusual for me to have it on all the time. Maybe I'll start turning it off on public transport.

This is a whole new (nasty) world for me. "Bluejacking" sounds durrty and fun!

Thanks for taking the time to reply.

Frubin
HTC Desire
Joined: Sep 02, 2004
Posts: > 500
From: London, England, UK
PM, WWW
Posted: 2006-02-23 16:18
Reply with quoteEdit/Delete This PostPrint this post
@ aka Dus. Ok. That make sense why you would need to leave it on then.

LoL, yeah it is. I've been doing for quite a quite now and it's and even more funny if send something "rude" to them!

Your very welcomed
_________________


[ This Message was edited by: Frubin on 2006-02-23 15:21 ]
OluYom
Xperia X10 Mini Black
Joined: Oct 27, 2004
Posts: > 500
From: Nigeria
PM, WWW
Posted: 2006-02-23 18:33
Reply with quoteEdit/Delete This PostPrint this post
Its perfectly safe to leave your Bluetooth on. Except your phone is already paired with the offender's, it won't accept any incoming files automatically. Rather it would prompt you for what you want to do. Simply reject the incoming file.

Even if you accept the incoming file, you still must run it before you can be infected.

Its quite a relief to know that on a Symbian platform, you cannot be infected without your consent. I have used Symbian devices for years, used bluetooth, infrared, email and web extensively and not got infected once.
PS: I used to be known as AYA
ayk
W900 white
Joined: Feb 17, 2006
Posts: 111
PM
Posted: 2006-02-24 04:58
Reply with quoteEdit/Delete This PostPrint this post
there aint no virus for any series40 phone. although se's Pxxx series phones run on the symbian os there is no known virus yet. so se users can relax for now. the 2 known virus for nokia's series60 phones r cabir & warrior.
u can surely keep ur bt on for ur headset & keep ur phone's visibility hidden so that ur phone can't be detected by other phones. [addsig]
senninha
Xperia X10 Black
Joined: Jan 05, 2003
Posts: > 500
PM
Posted: 2006-02-24 05:44
Reply with quoteEdit/Delete This PostPrint this post
the other thing to do if you need to keep your BT on for your headset is to

1. don't make it visible to other devices and/or

2. turn on your BT Powersave option so that the phone will only permit one BT connection at a time. aside from saving battery power, if your headset is connected to the phone, no other device can connect to it.
niranjan007
K850 Blue
Joined: Dec 12, 2004
Posts: 230
From: The garden city of India
PM
Posted: 2006-02-24 09:03
Reply with quoteEdit/Delete This PostPrint this post
I received the comm warrior virus when i switched on my 6670's bt in a restaurant while trying to bluejack. The file name was sense-less alphanumeric. I tried opening it. It first asked me whether i wanted to install it. I said yes. Then it asked me whether i wanted to install comm warrior. I realised it was a virus and cancelled the installation.
Comm warrior is the most widespread virus i've seen in india. Almost 4 out of 5 phones are infected by it on an average. The reason is that you dont need to install it to become infected. Just reboot the phone after receiving the virus in your inbox and voila you're infected with comm warrior!
This virus not only spreads via bluetooth, but also via mms, without the user's knowledge. It mmses itself to numbers found in the phonebook of the infected phone, with messages like "free sex software for your mobile". Since the person to whom its sent apparently knows you from your number,he installs it and gets infected.
So, my advice is to try installing the file you receive and cancel it when it shows what it is really installing,just to make sure it is really a virus.Of course,if you dont want to risk it,just delete the file at once.
aka Dus
Xperia Arc Black
Joined: Feb 23, 2006
Posts: 217
PM
Posted: 2006-02-24 11:08
Reply with quoteEdit/Delete This PostPrint this post
Thanks all.

It did give me the option to reject, which I did.

Now, I am going to have to get into this 'Bluejacking' craze...

Access the forum with a mobile phone via esato.mobi