Threat Description

Worm:​SymbOS/Commwarrior.D

Details

Aliases:Worm:​SymbOS/Commwarrior.D, Worm:​SymbOS/Commwarrior.D, SymbOS/Commwarrior.D
Category:Malware
Type:Worm
Platform:SymbOS

Summary



A standalone malicious program which uses computer or network resources to make complete copies of itself. May include code or other malware to damage both the system and the network.



Removal



Automatic Disinfection

F-Secure Mobile Anti-Virus will detect both Commwarrior variants and delete the worm components.

Note

After disinfecting the phone, remove the remaining empty directories by going to Application Manager and uninstalling Commwarrior's SIS file.

Alternative Installation of F-Secure Mobile Anti-Virus and Disinfection

If files cannot be installed over Bluetooth; F-Secure Mobile Anti-Virus can also be downloaded directly to the phone:

  • 1. Open web browser on the phone
  • 2. Go to http://mobile.f-secure.com
  • 3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
  • 4. Download the file and select open after download
  • 5. Install F-Secure Mobile Anti-Virus
  • 6. Go to applications menu and start Anti-Virus
  • 7. Activate Anti-Virus and scan all files
  • 8. Reboot your phone to kill Commwarrior process that is still running


Technical Details



Worm:SymbOS/Commwarrior.D is a worm that operates on Symbian Series 60 devices and is capable of spreading both over Bluetooth and MMS messages.

Commwarrior.D is a close variant of Commwarrior.B. The only significant different is that the text used in messages sent by Commwarrior.D are in Spanish.

Propagation

Commwarrior.D uses the following texts when spreading via MMS:

  • /abcdefghijklmnopqrstuvwxyz01234567890_
  • A mi novia Less
  • AMD!!!Universidad de Madrid y Valencia.
  • Antena 3 y Telecinco...
  • application/vnd.symbian.install
  • application/vnd.symbian.install
  • Ayudanos contra la drogadiccion, colabora ACDV 1 Euro.
  • Cari!!
  • Carod eres un cabron, Capullo!. Politonos de Neng !!. Follatela!Mis Albumes
  • Carod Rovira HPuta!
  • Coleccion de mis fotoalbum fallas 2006!!!
  • Comela!
  • Conseguir eso.. Maldito Sea!
  • Descarga nuevos sonitonos aqui!
  • Diapositiva PowerPoint ensymbian.com
  • Dluxe!!
  • Felicidades!!!! Tienes una postal aki!
  • Feliz Cumple!!!
  • Fernando Alonso te envia una invitacion!Sr Arganda
  • Hay que pagar para respirar y mear
  • Llamame cuando veas
  • Manda tu curriculum a esta direcciony llamaran!
  • Mario y yo nos casamos en 2 meses!!.
  • Me he cambiado la direccion de email, esta
  • Me he cambiado..
  • Mi e-mail es este
  • Mi Exnovia!
  • Mi foto erotic@
  • Mierda Estatut!!
  • Morena
  • Movistar!
  • Mp3 Player para Nokia series 60. Instalalo yaa!
  • Nuevas Tiendas!
  • Nuevo Virus THX para los Nokia s60s. Instala
  • Orgullo Gay
  • Politono Popcorn anuncio renault clio
  • PoltiTonos paramoviles,descarga ya!
  • Problema de bateria en Nokia!
  • Quedamos a tomar algo?
  • Quieres Reirte
  • Se busca gente
  • Solo trabajemos 6 horas diarias .....!
  • Sonitonos Nokia
  • Todos vendemos. Gracias Carod!
  • Valencia,ciudad de Campeones. Viva el VCF!Solo Nokia.
  • Viva las fallas de Valencia, mascletas online
  • Vodafone y Amenase fusionan. Compra un Nokia.com
  • Vodafone, Informacion gratuita en MMS..... Informa





SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Keep your mobile device protected

F-Secure Mobile Security will keep your mobile device protected on the go and enable you to find it in case you lose it

Learn More