Problem with your Symbian Cellphone Software?

[Señor Joze]

---

@chanbri: Bro, thanks kaayu for your warning. That will really help us. Would you be kind also to tel us nalang sad kung unsa ang remedy for that in case some of us still got fooled by that virus. Para atleast we wont have to search pa through the internet for it.
Thanks bro...

[chanbri]

Also beware as this sends mms w/ various subjects to entice you to open the file.
Common subject line would be:

Norton AntiVirus Released now for mobile, install it!

Dr.Web New Dr.Web antivirus for Symbian OS. Try it!

MatrixRemover Matrix has you. Remove matrix!

3DGame 3DGame from me. It is FREE !

MS-DOS MS-DOS emulator for SymbvianOS. Nokia series 60 only. Try it!

PocketPCemu PocketPC *REAL* emulator for Symbvian OS! Nokia only.

Nokia ringtoner Nokia RingtoneManager for all models.

Security update #12 Significant security update. See www.symbian.com

Display driver Real True Color mobile display driver!

Audio driver Live3D driver with polyphonic virtual speakers!

Symbian security update See security news at www.symbian.com

SymbianOS update OS service pack #1 from Symbian inc.

Happy Birthday! Happy Birthday! It is present for you!

Free ***! Free ***** software for you!

Virtual *** Virtual *** mobile engine from Russian hackers!

Porno images Porno images collection with nice viewer!

Internet Accelerator Internet accelerator, SSL security update #7.

WWW Cracker Helps to *CRACK* WWW sites like hotmail.com

Internet Cracker It is *EASY* to *CRACK* provider accounts!

PowerSave Inspector Save you battery and *MONEY*!

3DNow! 3DNow!(tm) mobile emulator for *GAMES*.

Desktop manager Official Symbian desctop manager.

CheckDisk *FREE* CheckDisk for SymbianOS released!MobiComm

[chanbri]

Detailed Description


Replication over bluetooth

Comwarrior replicates over bluetooth in SIS files that have random name, the SIS file contains the worm main executable commwarrior.exe and boot component commrec.mdl.

The SIS file contains autostart settings that will automatically execute commwarrior.exe after the SIS file is being installed.

When Comwarrior worm is activated it will start looking for other bluetooth devices, and send a copy of itself to each of these phones one after another. If target phone goes out of range or rejects file transfer, the commwarrior will search for another phone.

The replication mechanism of Comwarrior is different than in Cabir. The Cabir worm locks into one phone as long as it is in range, and depending on the variant will either look another variant after losing contact or stay locked.

The Comwarrior worm will look for new targets after sending itself to the first target, thus it is able to contact all phones in range. And possible spreading faster than Cabir.

Commwarrior replicates over Bluetooth only from 08:00 to 23:59, based on the phone's own clock.

Replication over MMS

Comwarrior replicates over MMS by sending MMS messages that contain infected SIS file to other users. The MMS messages contain variable text message and Comwarrior SIS file with filename commw.sis.


Unlike in bluetooth spreading the SIS file name is constant, otherwise the SIS file is identical to the one sent in bluetooth spreading.

The numbers where Commwarrior sends the MMS messages are read from the phone address book.

[chanbri]

Disinfection

F-Secure Mobile Anti-Virus will detect both comwarrior variants and delete the worm components.

If your phone is infected with Comwarrior and you cannot install files over bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone

1. Open web browser on the phone
2. Go to http://mobile.f-secure.com
3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
4. Download the file and select open after download
5. Install F-Secure Mobile Anti-Virus
6. Go to applications menu and start Anti-Virus
7. Activate Anti-Virus and scan all files

After disinfecting you phone, you can remove remaining empty directories by going to application manager and uninstalling the SIS file in which Comwarrior arrived (either commw.sis or random name)

[chanbri]

for more info see this link:

http://www.f-secure.com/v-descs/commwarrior.shtml
http://www.trendmicro.com/vinfo/viru...MWAR.A&VSect=T

[chanbri]

Actually here's what I did:
I untinstalled the program thru applications manager then used a file manager to delete these files:

C:\system\apps\CommWarrior\commwarrior.exe
C:\system\apps\CommWarrior\commrec.mdl
C:\system\updates\commwarrior.exe
C:\system\updates\commrec.mdl
C:\system\updates\commw.sis
C:\system\recogs\commrec.mdl

[Señor Joze]

WoW :!:
Thanks kaayu bro.... that was a real complete and detailed explaination and help for us.

[chanbri]

Yeah, It took me a while to realize it was a virus. It wasted my load sending mms every minute until I was able to removed it. Note that even after uninstalling the common warrior program it would still send the mms. You need to delete the files in the specific paths mentioned above to totally get rid of the virus.

[hello_there]

Thanks sad kaayo .

[GemWArrioR]

hi guys.. i need help... i want to install smart launcher to my cell.. my cell is 3660
with firmware 5.08.. everytime i want to install it it says.. security error.. cannot install