Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Malware Information Pages: Commwarrior.D
[Summary] | [Disinfection] | [Detailed Description] | [Detection]

Name : Commwarrior.D
Type:Worm
Category:Malware
Platform:SymbOS
Date of Discovery:March 07, 2006
Radar

Summary
Commwarrior.D is a close variant of Commwarrior.B. It is a worm that operates on Symbian Series 60 devices and is capable of spreading both over Bluetooth and MMS messages. For more detailed information, see the Commwarrior.B description at: http://www.f-secure.com/v-descs/commwarrior_b.shtml The main difference between Commwarrior.B and Commwarrior.D is that the text used in messages sent by Commwarrior.D are in Spanish.
Back to the Top

Disinfection

F-Secure Mobile Anti-Virus will detect Commwarrior variants and delete the worm components.

If your phone is infected with Commwarrior and you cannot install files over bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone.

  1. Open web browser on the phone
  2. Go to http://mobile.f-secure.com
  3. Select link "Download F-Secure Mobile Anti-Virus" and then select your phone model
  4. Download the file and select open after download
  5. Install F-Secure Mobile Anti-Virus
  6. Go to the applications menu and start Anti-Virus
  7. Activate Anti-Virus and scan all files
  8. Reboot your phone to kill the Commwarrior process that is still running

After disinfecting your phone, you can remove the remaining empty directories by going to the application manager and uninstalling the SIS file in which Commwarrior arrived.
Back to the Top

Detailed Description
Commwarrior uses the following texts when spreading via MMS:

  • /abcdefghijklmnopqrstuvwxyz01234567890_
  • A mi novia Less
  • AMD!!!Universidad de Madrid y Valencia.
  • Antena 3 y Telecinco...
  • application/vnd.symbian.install
  • application/vnd.symbian.install
  • Ayudanos contra la drogadiccion, colabora ACDV 1 Euro.
  • Cari!!
  • Carod eres un cabron, Capullo!. Politonos de Neng !!. Follatela!Mis Albumes
  • Carod Rovira HPuta!
  • Coleccion de mis fotoalbum fallas 2006!!!
  • Comela!
  • Conseguir eso.. Maldito Sea!
  • Descarga nuevos sonitonos aqui!
  • Diapositiva PowerPoint ensymbian.com
  • Dluxe!!
  • Felicidades!!!! Tienes una postal aki!
  • Feliz Cumple!!!
  • Fernando Alonso te envia una invitacion!Sr Arganda
  • Hay que pagar para respirar y mear
  • Llamame cuando veas
  • Manda tu curriculum a esta direcciony llamaran!
  • Mario y yo nos casamos en 2 meses!!.
  • Me he cambiado la direccion de email, esta
  • Me he cambiado..
  • Mi e-mail es este
  • Mi Exnovia!
  • Mi foto erotic@
  • Mierda Estatut!!
  • Morena
  • Movistar!
  • Mp3 Player para Nokia series 60. Instalalo yaa!
  • Nuevas Tiendas!
  • Nuevo Virus THX para los Nokia s60s. Instala
  • Orgullo Gay
  • Politono Popcorn anuncio renault clio
  • PoltiTonos paramoviles,descarga ya!
  • Problema de bateria en Nokia!
  • Quedamos a tomar algo?
  • Quieres Reirte
  • Se busca gente
  • Solo trabajemos 6 horas diarias .....!
  • Sonitonos Nokia
  • Todos vendemos. Gracias Carod!
  • Valencia,ciudad de Campeones. Viva el VCF!Solo Nokia.
  • Viva las fallas de Valencia, mascletas online
  • Vodafone y Amenase fusionan. Compra un Nokia.com
  • Vodafone, Informacion gratuita en MMS..... Informa
Back to the Top

Detection

F-Secure Mobile Anti-Virus for Symbian detects this malware starting from the update build number 74.
Back to the Top



F-Secure Corporation

Last Modified: March 07, 2006