Subscribe

Networks to the rescue

By Kaunda Chama, ITWeb features editor
Johannesburg, 21 Jun 2005

MTN and Vodacom have implemented software applications, code-named MMSafe and F-Secure respectively, which they say will block the new CommWarrior cellphone virus, as well as any future viruses.

The virus has been attacking series 60 platform phones, which include the Nokia 6600, 7610, 6680, 6681, 6630, 6670, 3650, Sony Ericsson P900 and P910i, and the Siemens SX1.

These phones are vulnerable to infection as they are capable of launching software applications in the same way a program would be run on a normal PC.

The anti-virus solutions are able to block the virus message generation, protecting subscribers with Bluetooth-enabled phones.

Both companies say their virus-blocking software solutions have been operational on their networks since early this month and have been successful in blocking all messages generated from infected handsets on their networks.

The virus

The MMS virus, CommWarrior, spreads itself only via Bluetooth and cannot be transmitted or propagated via MMS on the MTN or Vodacom networks because the software solutions within their networks strip out the virus part of an MMS message.

The virus affects only Symbian-based cellphones, particularly the Series 60 user interface cellphones. The virus, once transmitted to a cellphone, generates MMS messages to random numbers on the subscriber`s cellphone with any of several subjects.

These include 3DGame, 3DNow!, Audio driver, CheckDisk, Desktop, manager, Display driver, Dr. Web, Free SEX!, Happy Birthday!, Internet Accelerator, Internet Cracker, Matrix Remover, MS-DOS, Nokia ringtoner, Norton Antivirus, PocketPCemu, Porno images, PowerSave Inspector, Security update #12, Symbian security update, SymbianOS update, Virtual SEX and WWW Cracker.

"If an MTN subscriber receives such an MMS, the subscriber`s handset is not infected, and cannot be infected by the message, as MTN`s Comverse Multimedia Messaging Service Centre (MMSC) strips out the virus-infected attachment. The sender of the message is the one infected by the virus. MTN customers can thus use the enhanced functionality of MMS without fear, and continue to send them," the company says.

"We encourage all subscribers to be very careful when accepting messages. Prevention is always better, but in this instance we have a solution for the problem. The F-Secure Mobile Anti-Virus can be downloaded from the Internet," says Mthobi Tyamzashe, Vodacom`s chief communications officer.

Protection

Previously, before the MTN anti-virus blocker software installation, a subscriber was charged for the MMS messages generated by the virus, and had to contact the MTN call centre to be refunded for messages sent. With the new virus-blocking software implemented, all of the virus-generated messages are blocked before they can be charged to the subscriber.

Although the anti-virus blocking software does not stop the spread of the virus via Bluetooth, the subscriber is protected from the impact of the virus. Bluetooth interacts directly with a subscriber`s handset and is independent of the network, so the networks are unable to limit the spread of viruses through Bluetooth.

MTN subscribers infected with the CommWarrior virus should get a handset software update from their service provider, or download an anti-virus application to their cellphone. Subscribers will be charged for the software upgrades if their cellphone is out of warranty.

Vodacom subscribers can download the F-Secure Mobile Anti-Virus, which detects both the Bluetooth and MMS variants and deletes the worm, by opening a Web browser on their handsets and logging on to http://mobile.f-secure.com.

"The best way of protecting yourself from the virus is to switch off the Bluetooth connection and hide one`s visibility to all Bluetooth-enabled phones," says Ashraff Paruk, products and innovation GM at MTN SA. "If a subscriber receives a request to install a file or a message sent via Bluetooth, the subscriber must not choose to install the file or accept the message."

Cell C had not replied to queries about its virus protection measures by the time of publication.

Share