This application requires Javascript for optimal performance.

SymbOS/Comwar.v20pro.VAR!worm - Released Oct 21, 2007 - Last Updated Mar 11, 2008

Alias/es

Worm.SymbOS.Comwar.c, SymbOS/Commwarrior.c!sis virus, Symb/Comwar-C, SYMBOS_Comwar.C, SymbOS/CommWarrior.C worm, SymbOS/ComWar.I.worm, SymbOS/Comwar.2.0.C.VAR!worm

Detection Availability

Active DatabaseExtended Database
FortiGate
low
high
FortiClient
FortiMail N/A

Visible Symptoms

  • An infected phone may experience rapid battery power loss due to the constant efforts by the virus to infect other phones via a Bluetooth seek-and-connect outreach

  • Creation of files in the relative system path on an infected phone, such as the following:

    • \system\programs\cwoutcast.exe

Detailed Analysis

  • This detection is for samples that are very similar to SymbOS/Comwar.v20pro!worm. These are usually binary edited samples of the original worm.

  • The message and dropped files of these samples vary.

  • Some observed filenames of dropped files are the following:

    • \\system\programs\cwoutcast.exe

Recommended Action

  • Scan the infected device and delete all modules related to this worm.

Reference: ID - 423222