SymbOS.Commwarrior.C

Risk Level 1: Very Low

Printer Friendly Page|Rate this page

Discovered:: October 14, 2005
Updated:: February 13, 2007 12:45:42 PM
Also Known As:: SYMBOS_COMWAR.C [Trend Micro], SymbOS/Commwarrior.C [McAfee]
Type:: Worm
Systems Affected:: EPOC

SymbOS.Commwarrior.C is a worm that replicates on Series 60 phones. It attempts to spread using Bluetooth, Multimedia Messaging Service (MMS), and Multmedia Cards (MMC) as a randomly named .sis file. It has been reported that one of the possible file names is SymCommander_1_06.sis.

Symantec recommends the following to protect against this threat:

If Bluetooth is not required, it should be turned off.
If you require the use of Bluetooth, ensure that the device's visibility setting is set to "Hidden" so that it can not be scanned by other Bluetooth devices.
Avoid use of device pairing. If it must be used, ensure that all paired devices are set to "Unauthorized". This requires each connection request to be authorized by the user.
Do not accept unsigned applications (no digital signature) or applications sent from unknown sources. Be absolutely sure of the origin of the application before accepting it.

Antivirus Protection Dates

Initial Rapid Release version October 14, 2005
Latest Rapid Release version March 1, 2011 revision 022
Initial Daily Certified version October 14, 2005
Latest Daily Certified version March 1, 2011 revision 036
Initial Weekly Certified release date October 19, 2005

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low

Distribution

Distribution Level: Low

Writeup By: Yana Liu

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16