Worm:SymbOS/Commwarrior.L

Threat description

Details

Category: Malware
Type: Worm
Platform: SymbOS
Aliases: SymbOS/Commwarrior.L

Summary


Worm:SymbOS/Commwarrior.L is a worm that operates on Symbian Series 60 devices. The worm is capable of spreading both over Bluetooth and MMS messages.



Removal


Automatic action

F-Secure Mobile Security will detect both Commwarrior variants and delete the worm components.

More

More information on scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.

Note

After disinfecting the phone, remove the remaining empty directories by going to Application Manager and uninstalling Commwarrior's SIS file.

Alternative Installation of F-Secure Mobile Anti-Virus and Disinfection

If files cannot be installed over Bluetooth; F-Secure Mobile Anti-Virus can also be downloaded directly to the phone:

  • 1. Open web browser on the phone
  • 2. Go to https://mobile.f-secure.com
  • 3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
  • 4. Download the file and select open after download
  • 5. Install F-Secure Mobile Anti-Virus
  • 6. Go to applications menu and start Anti-Virus
  • 7. Activate Anti-Virus and scan all files
  • 8. Reboot your phone to kill Commwarrior process that is still running


Technical Details


Commwarrior.L is closely related to variant Commwarrior.D

Propagation

When Commwarrior infects a phone, it will start searching for other phones that are within Bluetooth range and send infected SIS files to the discovered phones. The SIS files that Comwarrior sends are randomly named, so that users cannot be warned to avoid files with any given name.

In addition to spreading over Bluetooth, Commwarrior will also read the user's local address book for phone numbers and start sending MMS messages containing the Commwarrior SIS file to those numbers.





Description Created: 2010-07-12 05:19:03.0

Description Last Modified: 2010-07-12 05:28:46.0


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Protect your life on every device

F-Secure SAFE looks out for you and the people close to you, on every device, all the time.

Learn More