Phantom data connections on nokia 6680 (series 60) phone

Hi all,

A few months back I purchased a Nokia 6680 3g phone to use as a modem
while I'm travelling around for work. after testing it with a 1GB per
month free trial for the first three months, I estimated my usage to be
around (and under) 400MB per month judging by the data logs.

Since moving to the new 400MB/month tarrif all had been good, until my
phone was recently cut off becuase I had a £460 phone bill. I called
orange who said that for two months in a row I had exceeded my monthly
data transfer of 400MB by approx 200MB each month (charged at 80p per
MB). This upped my bill to £460.

At first I contested it, as my phone's data log tracker said I'd used
way less than that, but I agreed to check the itemised phone log to see
if there was a discrepancy.

After checking my logs and writing down each data connection's time,
duration, and data transfer total (send & recv) I found that the logs
agreed (approximately) with orange's billing.

Upon closer inspection I found something very strange, my phone was
sometimes making back to back & simultaneous 3g data connections which
transferred the exact same amount of data twice in a row, which
statiscally seems like lottery winning odds (see below for an
examaple).


date start time duration finished sent kB recv kB

02/01 12:30 26:16.17 03/01 14:46 12035 88070
02/01 17:56 20:50.13 03/01 14:46 12035 88070

21/01 17:16 01:42.00 02/01 18:58 1504 7906
21/01 18:36 00:22.20 02/01 18:58 1504 7906

as you can see from the (real) sample logs above, there are two data
transfers back to back that transfer the exact same amount of data (no
two other connections have ever transfered the same amount of data),
but have also simultaneously connected between 18:36 and 18:58 (in the
second sample) which is apparently not possible. However, when I added
up the data transfers from the phantom connections it was approximately
equal to the difference between my log tracker data usage and what I
was charged.

many people have suggested some kind of series 60 virus causing this to
happen, but I'm certain I haven't got a virus, and it seems strange
that two back to back (and simultaneous) connections would transfer the
exact same amount of data twice even if it were a virus, the odds of
this seem almost improbable to me.

So, my question is, has anyone else experienced anything like this? and
if so, have they managed to get out of paying the extortionate charges
for it? I'm really keen to hear from anyone who might have experienced
a similar problem.