virus one
COMBATTING THE COMMWARRIOR VIRUS
Friday, May 06, 2005
A new virus affecting the series 60 platform phones e.g the Nokia 6600, 7610, 6680, 6681 6630, 6670, 3650 etc has been discovered. The virus, which is spread via Bluetooth and MMS, has been named ‘COMMWARRIOR’.
When COMMWARRIOR infects a phone, it searches for all other phones that it can reach over Bluetooth, and sends infected SIS files to those devices. The SIS files that COMMWARRIOR send are randomly named so users cannot be forewarned to avoid opening files with any specific given name. In addition, the virus will read the users local address book for phone numbers, and send MMS messages containing the COMMWARRIOR SIS file to all those listed.
“We encourage all subscribers to be very careful when accepting messages. Prevention is always better, but in this instance we have a solution for the problem. The F-Secure Mobile Anti-Virus can be downloaded from the internet.” says Mthobi Tyamzashe, Vodacom’s Chief Communication Officer.
The worm works as follows:
The device displays a message similar to the following, asking the user to accept a message from a particular device: ‘Receive message via Bluetooth from <device name>’.
The user will be notified that they have received a new message.
The user will be prompted with a message similar to the following: ‘Application is untrusted and may have problems. Install only if you trust provider’.
If the user chooses Yes, the user will be prompted to install the worm: ‘Install caribe?’
If the user chooses to install, then the COMMWARRIOR virus is installed on the phone.
The worm then sends itself to other Bluetooth enabled and MMS devices.
The worm executes each time the device is switched on.
more …
virus two
If your phone is infected with the COMMWARRIOR worm you can download the F-Secure Mobile Anti-Virus which detects both the Bluetooth and MMS variants and deletes the worm. The process is as follows:
1. Open web browser on the phone.
2. Go to
http://mobile.f-secure.com
3. Select the link ‘Download F-Secure Mobile Anti-Virus’ and then select your phone model.
4. Download the file and select open.
5. Install F-Secure Mobile Anti-Virus.
6. Go to the Applications menu and start the Anti-Virus.
7. Activate the Anti-Virus and scan all files.
After disinfecting your phone, you can remove the remaining empty directories by going to the application manager and uninstalling the SIS file in which the COMMWARRIOR virus arrived.
For more information you can read about the virus at:
http://www.f-secure.com/v-descs/commwarrior.shtml
