Home / malwarePDF  

Commdropper.H


First posted on 31 August 2006.
Source: SecurityHome

Aliases :

There are no other names known for Commdropper.H.

Explanation :

SymbOS/CommDropper.H is a SIS file trojan that drops SymbOS/Commwarrior.G onto the device.

CommDropper.H installs a damaged system component from SymbOS/Doomboot.M, which causes the device malfunction when rebooted. So if you have installed Commdropper.H it is important not to reboot your device before disinfection occurs

Solution :

If your phone is infected with Comwarrior and you cannot install files over bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone:

  1. Open the phone's web browser

  2. Go to http://mobile.f-secure.com

  3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model

  4. Download the file and select open after download

  5. Install F-Secure Mobile Anti-Virus

  6. Go to applications menu and start Anti-Virus

  7. Activate Anti-Virus and scan all files

  8. Reboot the phone to remove any Commwarrior processes that are still running


After disinfecting the phone, you can remove any remaining empty directories by going to the application manager and uninstalling the SIS file in which Comwarrior arrived.

Disinfection for the cases when phone is already rebooted and cannot start up

CAUTION! this method will remove all data on the device including calendar and phone numbers
  1. Power off the phone

  2. Hold following three buttons down "answer call" + "*" + "3"

  3. Keep holding the buttons and power on the phone

  4. Depending on the model, you either get text "formatting" or startup dialog that asks for initial phone settings

  5. Your phone is now fomatted and can be used again

Last update 31 August 2006

 

TOP