An .exe file under c:\system\apps or c:\system\data.
Please let BitDefender disinfect your files.
Alexandru Maximciuc, virus researcher
SymbOS.Worm.Beselo.A is a worm that works on devices with Symbian S60 Second Edition. Spreads by sending copies of itself through MMS and Bluetooth as a message with "Photo" as body and with as an installation file attached. But instead of using the standard .sis extension, it uses beauty.jpg, sex.mp3 and love.rm as filenames to make the users think it's a multimedia file. The operating system recognizes the file as an installation file and prompts asking for installation. Users are advised to never accept an installation triggered by a media file.
The installer copies the worm's executable in C:\system\data with a random name(7 characters long, given by the sender). When executed, the worm copies itself in C:\system\apps with the same name.