Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Malware Information Pages: Commwarrior.T
[Summary] | [Disinfection] | [Detailed Description] | [Detection]

Name : Commwarrior.T
Type:Worm
Category:Malware
Platform:SymbOS
Origin:RUSSIAN FEDERATION
Date of Discovery:January 15, 2007
Radar

Summary
Commwarrior.T is a new variant of the Commwarrior worm that is based on Commwarrior.Q. Unlike most Commwarrior variants, Commwarrior.T is a recompiled version that contains new functionality.

Commwarrior.T affects only Symbian Series 60 phones that use Symbian OS version 8.1 or older. This means that the latest model of phones that will be affected is the Nokia N72. Phones using Symbian OS 9.0, such as the Nokia E70 or 3250, will not be affected.

For more details please see the Commwarrior.Q description.
Back to the Top

Disinfection

Removal Steps:

Kill Commwarrior Process
  1. Download F-Commwarrior utility from
    http://mobile.f-secure.com/disinfection/fcommwarrior.html
  2. Install F-Commwarrior into the phone you suspect is infected
  3. Run F-Commwarrior and scan the phone for the Commwarrior worm

Install F-Secure Mobile Anti-Virus to finish cleaning up your phone
  1. Open the phone's web browser
  2. Go to http://mobile.f-secure.com
  3. Select the "Downloads" link and then select the phone model
  4. Download the file and select open after download
  5. Install F-Secure Mobile Anti-Virus
  6. Go to Applications Menu and start Anti-Virus
  7. Activate Anti-Virus and scan all files
Back to the Top

Detailed Description
Commwarrior.T is very similar to Commwarrior.Q. Currently the only significant difference appears to be the T variant uses more stealth by not advertising its presence on the infected device.
Back to the Top

Detection

F-Secure Mobile Anti-Virus for Symbian detects this malware starting from the update build number 119.
Back to the Top



F-Secure Corporation

Last Modified: January 16, 2007