Commwarrior is a Bluetooth worm on the SymbOS. It is also known to be one of the first (if not the first) mobile phone virus to spread through the MMS (Multimedia Messaging Service) and Bluetooth. This virus is very viral during its time and was used commonly on other SymbOS viruses and variants, like Doomboot.
Commwarrior tries to request the user to install it when sent to a device via Bluetooth.
If the user installs the worm, it will do try to do the following to Bluetooth and MMS:
- It will use Bluetooth to scan for all Bluetooth connected devices and attempts to send the virus's .sis files to the discovered devices. The files sent are named randomly, so that other SymbOS phones cannot warn the user to avoid such files.
- It will then use MMS to message the virus to other contacts, randomly named. Depending on the variant, it can infect all contacts or certain users.
The messages it sends are now random for MMS messages. A list of it can be seen here (none of the messages are censored):
- Matrix has you. Remove matrix!
- 3DGame from me. It is FREE !
- MS-DOS emulator for SymbvianOS. Nokia series 60 only. Try it!
- PocketPC *REAL* emulator for Symbvian OS! Nokia only.
- Nokia ringtoner
- Nokia RingtoneManager for all models.
- Security update #12
- Significant security update. See www.symbian.com
- Display driver
- Real True Color mobile display driver!
- Audio driver
- Live3D driver with polyphonic virtual speakers!
- Symbian security update
- See security news at www.symbian.com
- SymbianOS update
- OS service pack #1 from Symbian inc.
- Happy Birthday!
- Happy Birthday! It is present for you!
- Free S*X!
- Free *S*X* software for you!
- Virtual S*X
- Virtual S*X mobile engine from Russian hackers!
- Porno images
- Porno images collection with nice viewer!
- Internet Accelerator
- Internet accelerator, SSL security update #7.
- WWW Cracker
- Helps to *CRACK* WWW sites like hotmail.com
- Internet Cracker
- It is *EASY* to *CRACK* provider accounts!
- PowerSave Inspector
- Save you battery and *MONEY*!
- 3DNow!(tm) mobile emulator for *GAMES*.
- Desktop manager
- Official Symbian desctop manager.
- *FREE* CheckDisk for SymbianOS released!MobiComm
- Norton AntiVirus
- Released now for mobile, install it!
- New Dr.Web antivirus for Symbian OS. Try it!
Commwarrior.C, Commwarrior.D, Commwarrior.E
These variants either install the same files with different names, installs additional non-malicious files, some that corrupts phone applications, or the virus is renamed.
Commwarrior.D is named "S*xoo-Chattz" (uncensored)
Commwarrior.E is named "Amena_Info:z". The messages shows that this variant came from Romania.