View Full Version : Series 60 Anti-virus Application Review By Calvin Tang
arwin00139 10th Apr '08 Thu, 12:32 Before anything else i would like to thank Sir Eldogg, Sir Rocky and Mr. Calvin Tang the developer of Calvinstinger himself, for giving me the permission to use his review and share it to you guys to know the suitable antivirus app for you.
Credits : Original Poster Somewhere on the Internet :panic:
Kaspersky Anti-Virus
http://img.photobucket.com/albums/v316/calvin16/P1010019.jpg
This anti-virus application can't cure and fix those malwares effectively, while I'm testing it using the 67 malwares which had found by me recently, yes, it deleted all the detected malware, but, curious, when the phone has restart, the whole phone system is being crashed and thus causing user can't access the menu function.
http://img.photobucket.com/albums/v316/calvin16/17816f4b.jpghttp://img.photobucket.com/albums/v316/calvin16/69877174.jpghttp://img.photobucket.com/albums/v316/calvin16/35123a9b.jpg
arwin00139 10th Apr '08 Thu, 12:33 SimWorks Anti-Virus
http://img.photobucket.com/albums/v316/calvin16/P1010017.jpg
This anti-virus application is an ease to use appliation, small in file size which didn't cause the phone lagging or hanging. It also show a log what virus has detected.However, it can't fix the virus effectively, I have tested it using an old mobile malware such that skulls.D, but this anti-virus fail to fix the virus. By the way, malwares like cabir variant, commwarrior.A virus, drever variant, MGdropper virus, dampig.A and mosquito dialer trojan. can be fix effectively.
http://img.photobucket.com/albums/v316/calvin16/P1010018.jpg
arwin00139 10th Apr '08 Thu, 12:34 Jamanda Cabir Fix
http://img.photobucket.com/albums/v316/calvin16/P1010020.jpg
This anti-cabir/caribe application only fix the original cabir malware and some of the cabir variant only. Unfortunately, it can't detect all te cabir variant due to it outdated virus database.
arwin00139 10th Apr '08 Thu, 12:36 Commander Anti-Virus
http://img.photobucket.com/albums/v316/calvin16/P1010022.jpg
This anti virus application offer a real time scan function, any incoming message or file will be first scan by the application, however, this application is for evaluation test only, when it detected a virus, it'll not delete it, on the other hand, it will requests user for the registration code in order to delete the file. Besides, it engine scanner have some problem, which always trigger the alarm, causing false alert to user.
http://img.photobucket.com/albums/v316/calvin16/P1010021.jpg
Generally, till date, I can't find any superb anti-virus product which can work effectively, my conclusion is, manual deletion method is the best way to cure virus if compare to the above products.
Besides, Series 60 users who own a device with InfraRed function may a bit lucky because till now, hackers only target to block the Bluetooth function but not the InfraRed function as the newer Series 60 device didn't implemented with IR in the future, I guess so. By using an InfraRed communicate with the computer, this make things easier to locate and delete the malwares directory.
arwin00139 10th Apr '08 Thu, 12:38 http://img140.imageshack.us/img140/9798/exevirusstop9wd.gif
ExoVirusStop is an anti-virus application which protect user free from mobile viruses. It consume only a little memory when it's running because of it's small file size. Besides, it provide a Virus Dictionary which can let user to know more about mobile viruses. The scanning engine just takes a few seconds to perform its scanning action.
To test this anti-virus application, I've installed Cabir.B, Cabir.S, Cabir.T,Skulls.C, Skulls.H and Trojan Mosquito.
http://i21.photobucket.com/albums/b261/McAfee88/f82887b8.jpg
While I was testing them with cabir variants, only Cabir.B was detected and the rest of them was not detected by it. Yes, it can remove Caribe virus successfully but unfortunately, from this testing results, this prove that ExoVirusStop scanning engine is not that strong and accurate and thus its scanning engine may out-to-date if compare to others anti-virus products.
When testing them with skulls trojan, it only capable detecting Skulls.C only and skulls.H was not detected in the testing progress. When Skulls trojan is detected, it will automatically remove it but it require user to reboot the phone to finish disinfection process. While I was following their instruction, my phone was stuck on the next reboot and menu system can be access and thus all my phone system being disabled.
When trojan mosquito was installed into the phone, it will detect it as a Trojan Mosquito but not removing them, it will pop out a message stating if it's a warez version mosquito game, please uninstall it.
Generally, this anti-virus application is not up-to-date and this may cause user vulnerable to new viruses.
Summary:
Pros:-
1.Small in file size.
2.Virus Dictionary.
3.Fast Scanning Engine.
Cons:-
1.Outdated Scanning engine
2.Scanning engine performance very bad and detect viruses incorrectly
arwin00139 10th Apr '08 Thu, 12:39 Cingular & McAfee have partnered to provide disinfection tool for Series 60 user. This Stinger application is able to detect and removes the following mobile malwares:-
http://i21.photobucket.com/albums/b261/McAfee88/5d8ebf8d.jpg
* CommWarrior.A
* CommWarrior.B
* Drever.A
* Locknut.B
* Fontal.A
This application had been tested by me and it works fine. For me, this is a very great dininfection tools if compare to F-SECURE and other AV vendors because this application can one time detect and remove 5 malwares in just one time scan!
While I was testing them with some malwares installed in the phone, it will come out with a text stating what malware has been detected and auto remove it just less than 10 second!
http://i21.photobucket.com/albums/b261/McAfee88/63e40f17.jpg
Summary:-
Pros:-
1. Scanning engine detects malware accurately.
2. Memory consumption is very least, just about 9.5Kb
3. Detecting 5 malware in just one time scan
4. Scan malware just less than 10 seconds.
Cons:-
1. Due to lack of graphical user interface(GUI), user may panic if it is a virus.
By the way, just a warning to you guys that not to download any suspicious file because new malware has been detected and it's spreading in Rally 3.SIS and containing the following symtomps:
http://i21.photobucket.com/albums/b261/McAfee88/c32b1275.jpg
arwin00139 10th Apr '08 Thu, 12:41 Disinfector
Guys, I've just made a short review on MPulze Anti-Virus application.
I've installed the previous trojan--Skulls variant and the phone looks like the image below:
http://i21.photobucket.com/albums/b261/McAfee88/0ee0eee2.jpg
Next, I run a full system scan on te phone, its scanning engine detected some of the viruses/trojans horse in the phone and prompt user to remove it:
http://i21.photobucket.com/albums/b261/McAfee88/979f648c.jpg
After scanning work has been completed, it will show how many viruses/trojans detected and how many file had been disinfected and required user to reboot the phone:
http://i21.photobucket.com/albums/b261/McAfee88/7b36b16c.jpg
When my phone has been rebooted, the phone system crashing phenomenon occur as shown below(All the menu function being disabled):
http://i21.photobucket.com/albums/b261/McAfee88/52e39ec5.jpg
The above crashing phenomenon has been reported to the developer
arwin00139 10th Apr '08 Thu, 12:42 Symantec Anti-Virus
http://i4.tinypic.com/10hpo9t.jpg
Symantec anti-virus is one of the anti-virus applications with built-in firewall functionality. This AV product will automatically startup each time the phone is switched on, besides, so far, not any other known mobile malwares, which can disable and replace a corrupted file to disable this AV products, anyway, users are advised to keep their virus definitions up to date to ensure protection from latest mobile threats.
When tested, using a couple of mobile malwares, on my NOKIA 6680 before any infected files that target to install on certain directories on the phone or memory card, it will display a message stating what virus is trying to gain access to the phone’s system and prompt users whether they allow to permit the action or not.
By disinfecting the phone, I have run the Symantec AV products to scan for viruses, although the scan time takes quite long to perform the scan(Usually, it depends on the user, if the user’s phone memory or memory card occupies a large amount of space, it takes long to perform its action). When the scanning is in progress, it will look like the image below, by showing how many viruses have been found and what directory is currently being scanned.
When the scanning is complete, it will display a message showing how many viruses are detected and show what virus is threatening the phone. Sadly, Symantec AV company didn't implement a command to delete all infected files one-time-go, but it prompts users to delete them one by one which may take some time.
Although its scanning engine is much more accurate if compared to other AV products, it still fails to perform its 'Anti-Virus' functionality, after I had deleted all the infected files and the phone has been restarted, the same thing happened: the malwares were still present in the targeted directory.
Symantec anti-virus built with strong firewall functionality is the most powerful anti-virus application that I have tested, that is, it will prompt users whether they allow or deny the infected file to be installed in the targeted directory.
arwin00139 10th Apr '08 Thu, 12:46 F-Secure Anti-Virus
F-Secure Anti-Virus for Symbian Series 60 platform provides real-time protection against cell phone viruses and it’s also providing the latest virus definitions to ensure users less vulnerable to latest mobile threats.
Before getting the anti-virus working, you must first activate your product via GPRS/EDGE/3G packet data network prior.
While any incoming suspicious file that contains malwares signature, F-Secure AV immediately generates a warning message to avoid users from installing the suspicious file on the phone.
It will show what malwares had been detected and list out the infected directory and the file name:
It will automatically quarantine the infected file.
After the scanning is completed, it will shows a total number of how many mobile malwares were found and how many files have or haven’t been scanned:
It will show which files had been quarantined.
To test the accuracy of the scanning engine and their security solution to handle cell phone malwares, I’ve installed one of the Skulls Trojan in the 52 repack Trojans that were reported last time.
Although its scanning engine is quite accurate to detect those malwares but unfortunately, it has proven that its security solution is still not good enough because it doesn’t quarantine/delete the infected malicious files and causes certain unwanted files or non-functional icons to exist in the phone.
Generally, the most attracting part of F-Secure Anti-Virus is that it reacts fast when a mobile virus has been detected and it provides latest virus definitions for the user. Unfortunately, due to its large size of its application, some low processing phones like NOKIA 7650/3650/3660 will cause some annoying phenomenon like lagging or crashing to occur. Besides, its security solution handling method is very poor and doesn’t fix the infected phone successfully.
Summary:-
Pros:
1. Accurate scanning engine
2. Providing latest virus definition
3. Providing real-time scan
Cons:-
1. It will takes up a lot of memory and may cause lagging or system crashing phenomenon occur in lower processing phone such as NOKIA 7650/3650/3660 etc.
2. It can only be installs on the internal memory
3. Its security solution method is still not very strong, causing certain unwanted files or non-functional files to exists in the phone.
arwin00139 10th Apr '08 Thu, 12:47 Netqin Antivirus For Os6,os7,os8
http://img406.imageshack.us/img406/4276/screenshot0712bp.jpg
HERE IS ONE CLASS ANTI VIRUS FOR YOUR PHONE , NOW YOU CAN SEARCH AND CHECK IF THERE IS VIRUS IN SIS OR JAR COMPRESSED FILES DIRECTLY ON YOUR PHONE BEFORE INSTALLING THEM
SCAN ------------ SCAN THE SYSTEM ACCORDING TO THE CUSTOMIZATION. DEFAULT ALL DISKS WILL BE SCANNED. YOU CAN CHOOSE THE DISKS TO BE SCANNED ON THE CHOOSE VIEW.
ABOUT------------ DISPLAY INFORMATION ABOUT THE APPLICATION. THE SCAN VIEW DISPLAYS THE FOLLOWING INFORMATION.
FILE SCANNED : THE NO. OF FILES WHICH IS SCANNED.
VIRUS:THE NUMBER OF VIRUSES WHICH HAVE BEEN FOUND IN THE PHONE.ESPECIALLY, FILES LIKE SIS MAY CONTAIN SEVERAL SUB-FILES WHICH ARE INFECTED BY DIFFERENT KINDS OF VIRUSES AND THIS ANTI VIRUS WORKS 24X7 IN THE BACKGROUND EVEN WHILE YOU ARE INSTALLING ANY APPLICTION
arwin00139 10th Apr '08 Thu, 12:49 CalvinStinger Disinfection Tool
CalvinStinger© is a new and first freeware application in virus category, actually it is a disinfection tools for certain Symbian malwares only, capable of detecting and eliminating Symbian Viruses such as: BlankFont.A, Commwarrior.A, Commwarrior.B, Cabir/Caribe, DoomBoot.A, Fontal.A, Locknut.A, Locknut.B, Mabir.A, and Lasco.A.
It is not an anti-virus program in nature, it only disinfects your phone and that way it does not prevent malicious programs from infecting your smartphone.
This software only serves to remove the malicious codes that does damage to your phone. It does not restore, backup or rescue any data.
CalvinStinger© is maybe the smallest application ever developed for S60 phones but also still incredible useful.
http://img472.imageshack.us/img472/6458/6680calvinstingerappanimationv.th.gif
arwin00139 10th Apr '08 Thu, 12:50 http://img83.imageshack.us/img83/4008/antivirmobile1ve.jpg
Code:
PDA-Virus Definition File
Version: 6.34.0.9
Number of Signatures: 231
License date: 20.3.2006
AntiVir Mobile is delivered with the following outstanding features:
* Specially developed Symbian- search engine and Symbianvirus-definitions that are able to detect and treat Symbian-specific malware, i.e. malware that runs on smartphones on Symbian 6.1 to 8.0, Series 60/80
* Installation of the program package using bluetooth, IrDA or GPRS downloads.
* Separate update for the search engine and the virus definition over the Internet and by simply replacing the appropriate files.
* Individual configuration of the search scope and the handling of infected files.
* Detailed messaging whenever a malware is detected with the possibility to deal with the infection instantly.
* Reporting providing all information about scans as well as system and version infos.
* Needs very little system resources.
The following smartphones are supported:
Licensing AntiVir Mobile
* Transfer the licence file "hbedv.key" into your mail inbox or into C: root directory
* After you have transferred the licence file go to the menu and choose the entry "licence"
VDF-Update
* To update the VDF-file (virus definition file) transfer the file "mobile.vdf" into mail inbox or copy it directly to C:] root
* start AntiVir Mobile.Then choose the entry "Update VDF" from the Help Menu.
Update using the internet
* You can also update the application through the interent using a GPRS connection.To save you time and money the updater does not download the complete package but only those files(program files,VDF files,search engine and so on)that have actually been changed.
* To update through the internet choose the menu entry "internet update".
Nokia N-Gage QD, N-Gage, Nokia 3660, 3620, 6600, 7650, 6670, 3230, 6260, 6620, 6630, 6680, 6681, 6682
Panasonic X700
Siemens SX 1
Sendo X and X2
Nokia Communicator 9300 and Communicator 9500
arwin00139 10th Apr '08 Thu, 12:51 SMobile.Systems.Disinfect.v1.00.S60.SymbianOS
http://img86.imageshack.us/img86/8118/scr0000329vp.jpg
SMobile Systems is now offering the Commwarrior.C disinfection tool for free.
Commwarrior.C is the latest mobile worm that has the capability to spread via Bluetooth to nearby devices and via MMS to the contacts in an infected device.
At present Commwarrior.C has been detected on Symbian Series 60 devices. The worm generates random messages and sends texts and media messages to the contacts of an infected device. The name of the file is not recognizable as being a known or regular file but the application installation file is always "CWOutcast".
SMobile Disinfection tool will eleminate the virus and prevent it from duplicating itself. This will prevent it from attacking other devices.
arwin00139 10th Apr '08 Thu, 12:52 AntiCommWarrior, 1.0 (Freeware) by Daxx Web Industries BV
http://img516.imageshack.us/img516/7643/anticw1618fl.gif
AntiCommWarrior is the first and unique utility that allows to delete CommWarrior.c virus in a correct way
NEW! AntiCommWarrior is the first and unique utility that allows to delete CommWarrior.c in a correct way. Removal occurs automatically and does not require any actions from the phone user.The utility is accessible for free downloading.
AntiCommwarrior tool deactivates and completely removes
* Commwarrior.a
* Commwarrior.b
* Commwarrior.c
and probably other yet unknown variants of that MOST DANGEROUS mobile virus that we have seen so far
arwin00139 10th Apr '08 Thu, 13:04 Credits again to the Original Poster
aed040 22nd Apr '08 Tue, 20:12 Credits again to the Original Poster
ANG SIPAG NAMAN NANG ORIGINAL POSTER...SANA MAY LINKS NA YUNG MGA AV...
semajames76 22nd Apr '08 Tue, 21:39 HI Calvin!
:clap:
I have read all your reviews i.e. Series 60 Anti-virus Application Review, but, i can't understand and cannot distinguish which AV should I be using after reading all of them.. In your own opinion which AV would you recommend and shud i use/intall on my s60 fone to prevent from catching all those viruses?..
I would look forward to reading from you soon..
Thanks a lot for all the info..
:clap::thumbsup:
kevin1410 23rd Apr '08 Wed, 17:42 maganda na sana ang kaspersky
fine2007 29th Jul '08 Tue, 20:36 huhuhu...na-installko yung mcafee taposhindina gumagana yung menu functionko.tulong naman!!!!
Einel_Sukebe8 30th Jul '08 Wed, 11:33 Hmmm...Very informative...Salamat sa info. Basically, there is no perfect anti-vir right now. So guys, choose wisely...Peace out!
Fait 30th Jul '08 Wed, 15:02 Wrong thread?
|