1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Home
  2. Security
  3. Security Lab
  4. Latest Threats
  5. Virus Descriptions
  6. Commwarrior.T

Commwarrior.T

Name : Commwarrior.T
Category:Malware
Type:Worm
Platform:SymbOS
Origin:RUSSIAN FEDERATION
Date of Discovery:January 15, 2007

Summary

Commwarrior.T is a new variant of the Commwarrior worm that is based on Commwarrior.Q. Unlike most Commwarrior variants, Commwarrior.T is a recompiled version that contains new functionality.

Commwarrior.T affects only Symbian Series 60 phones that use Symbian OS version 8.1 or older. This means that the latest model of phones that will be affected is the Nokia N72. Phones using Symbian OS 9.0, such as the Nokia E70 or 3250, will not be affected.

For more details please see the Commwarrior.Q description.

Disinfection

Removal Steps:

Kill Commwarrior Process
  • Download F-Commwarrior utility from
http://mobile.f-secure.com/disinfection/fcommwarrior.html
  • Install F-Commwarrior into the phone you suspect is infected
  • Run F-Commwarrior and scan the phone for the Commwarrior worm

Install F-Secure Mobile Anti-Virus to finish cleaning up your phone
  • Open the phone's web browser
  • Select the "Downloads" link and then select the phone model
  • Download the file and select open after download
  • Install F-Secure Mobile Anti-Virus
  • Go to Applications Menu and start Anti-Virus
  • Activate Anti-Virus and scan all files

Additional Details

Commwarrior.T is very similar to Commwarrior.Q. Currently the only significant difference appears to be the T variant uses more stealth by not advertising its presence on the infected device.

Detection

F-Secure Mobile Anti-Virus for Symbian detects this malware starting from the update build number 119.