Fandom

Malware Wiki

Commwarrior

1,327pages on
this wiki
Add New Page
Comments0 Share

Commwarrior is a Bluetooth worm on the SymbOS. It is also known to be one of the first (if not the first) mobile phone virus to spread through the MMS (Multimedia Messaging Service) and Bluetooth. This virus is very viral during its time and was used commonly on other SymbOS viruses and variants, like Doomboot.

Payload Edit

Commwarrior tries to request the user to install it when sent to a device via Bluetooth.

If the user installs the worm, it will do try to do the following to Bluetooth and MMS:

  • It will use Bluetooth to scan for all Bluetooth connected devices and attempts to send the virus's .sis files to the discovered devices. The files sent are named randomly, so that other SymbOS phones cannot warn the user to avoid such files.
  • It will then use MMS to message the virus to other contacts, randomly named. Depending on the variant, it can infect all contacts or certain users.

VariantsEdit

Commwarrior.BEdit

The messages it sends are now random for MMS messages. A list of it can be seen here (none of the messages are censored):

  • MatrixRemover
  • Matrix has you. Remove matrix!
  • 3DGame
  • 3DGame from me. It is FREE !
  • MS-DOS
  • MS-DOS emulator for SymbvianOS. Nokia series 60 only. Try it!
  • PocketPCemu
  • PocketPC *REAL* emulator for Symbvian OS! Nokia only.
  • Nokia ringtoner
  • Nokia RingtoneManager for all models.
  • Security update #12
  • Significant security update. See www.symbian.com
  • Display driver
  • Real True Color mobile display driver!
  • Audio driver
  • Live3D driver with polyphonic virtual speakers!
  • Symbian security update
  • See security news at www.symbian.com
  • SymbianOS update
  • OS service pack #1 from Symbian inc.
  • Happy Birthday!
  • Happy Birthday! It is present for you!
  • Free S*X!
  • Free *S*X* software for you!
  • Virtual S*X
  • Virtual S*X mobile engine from Russian hackers!
  • Porno images
  • Porno images collection with nice viewer!
  • Internet Accelerator
  • Internet accelerator, SSL security update #7.
  • WWW Cracker
  • Helps to *CRACK* WWW sites like hotmail.com
  • Internet Cracker
  • It is *EASY* to *CRACK* provider accounts!
  • PowerSave Inspector
  • Save you battery and *MONEY*!
  • 3DNow!
  • 3DNow!(tm) mobile emulator for *GAMES*.
  • Desktop manager
  • Official Symbian desctop manager.
  • CheckDisk
  • *FREE* CheckDisk for SymbianOS released!MobiComm
  • Norton AntiVirus
  • Released now for mobile, install it!
  • Dr.Web
  • New Dr.Web antivirus for Symbian OS. Try it!

Commwarrior.C, Commwarrior.D, Commwarrior.EEdit

These variants either install the same files with different names, installs additional non-malicious files, some that corrupts phone applications, or the virus is renamed.

Commwarrior.D is named "S*xoo-Chattz" (uncensored)

Commwarrior.E is named "Amena_Info:z". The messages shows that this variant came from Romania.

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.