My Bitdefender
  • 0 Shopping Cart

SHARE
THIS ON

Facebook Twitter Google Plus

SymbOS.Worm.Beselo.A

LOW
LOW
12635

Symptoms


An .exe file under c:\system\apps or c:\system\data.

Removal instructions:

Please let BitDefender disinfect your files.

Analyzed By

Alexandru Maximciuc, virus researcher

Technical Description:

SymbOS.Worm.Beselo.A is a worm that works on devices with Symbian S60 Second Edition. Spreads by sending copies of itself through MMS and Bluetooth as a message with "Photo" as body and with as an installation file attached. But instead of using the standard .sis extension, it uses beauty.jpg, sex.mp3 and love.rm as filenames to make the users think it's a multimedia file. The operating system recognizes the file as an installation file and prompts asking for installation. Users are advised to never accept an installation triggered by a media file.

The installer copies the worm's executable in C:\system\data with a random name(7 characters long, given by the sender). When executed, the worm copies itself in C:\system\apps with the same name.