|
Symbian Reviews |
|
|
|
SymbianOne Stuff! |
|
|
|
|
Welcome to SymbianOne... est. 2003 as one of the first Symbian-centric Developer portals, we provide our readers with the latest technology news, tool tips, developer resources and items of interest to developers, system integrators, carrier reps, handset makers, mobile industry architects, wireless technology professionals. Look for news, articles, editorial, app reviews, device updates and more, all focused on the Symbian OS, S60, and related topics. |
|
Symantec Responds to SymbOS.Lasco.A Smartphone Virus
|
|
|
|
Written by Source: Symantec - Edited by G Letham
|
|
Thursday, 27 January 2005
|
 SymbOS.Lasco.A is a Symbian Series 60 Bluetooth worm that also infects .sis archives.
The worm is based on SymbOS.Cabir, except it also searches for .SIS files on the
device and adds itself to them.
Symantics threat metrics for this virus remain Low. Technical specifications
have been made available from Symantec:
SymbOS.Lasco.A is transmitted through Bluetooth as a .sis file.
When the worm arrives on a target device the following may happen:
- The device displays a message similar to the following, asking the user to accept
a message from a particular device:
Receive message via Bluetooth from [device name]?
- The user will be notified that they have received a new message.
- The user will be prompted with a message similar to the following:
Application is untrusted and may have problems. Install only if you trust provider.
- If the user chooses Yes, the user will be prompted to install the worm.
Install Velasco?
- The worm creates the following files on the phone:
- SYSTEMAPPSVELASCOVELASCO.APP
- SYSTEMAPPSVELASCOVELASCO.RSC
- SYSTEMAPPSVELASCOMARCOS.MDL
- C:SYSTEMSYMBIANSECUREDATAVELASCOVELASCO.APP
- C:SYSTEMSYMBIANSECUREDATAVELASCOVELASCO.RSC
- C:SYSTEMSYMBIANSECUREDATAVELASCOVELASCO.SIS
- C:SYSTEMRECOGSMARCOS.MDL
- C:SYSTEMINSTALLSVELASCO.SIS
- The worm attempts to send itself to other Bluetooth-enabled devices it finds,
regardless of the type of device.
- The worm searches the device for all .sis files and appends itself to those files.
When an infected .SIS file is installed, the worm will automatically install along
with the original application.
- The worm executes every time the device is turned on.
Recommendations and removal instructions can be found by following the links
provided below
See Also:
Note: The debate about the actual threat level that exists particularly via Bluetooth
enabled devices rages on. If you have comments please feel free to forward them
to us at SymbianOne. See also this fine article by S Litchfield
|
|
Last Updated ( Thursday, 27 January 2005 )
|
|
Mobile Technology Blogs |
|
| |
Mobile Technology Blogs, News, and RSS Feeds... Looking for more news, tips, commentary, and blogger discussions? Check out
these excellent feeds for more on wireless technologies and mobile application
development. Got a feed to share? Please tell us about it... | |
|
SymbianOne Sponsored Links and Events |
- LBS LATAM 09 - September 17, 2009, Coral Gables, Florida. LBS represent one of the most promising drivers for revenue generation for service providers in the Region. The possibility of having access to geographic data in real time provides both accrual information and entertainment, and at the same time it generates new business opportunities such as direct marketing; services such as parental control and personal security. According to eMarketer, in the year 2012, there will be more than 63 million of services around the world based in localization services.
- CTIA Wireless IT & Entertainment 2009 - With a focus on applications, network architecture and technologies such as LBS, machine-to-machine and WiMAX, this international event brings a community of users, carriers, developers and manufacturers together to generate dialogue, share ideas and debate the economics of mobile business. Oct. 7-9, 2009, San Diego, CA
 LBSZone.com - for developers interested in mobile location-based services
Geospatial & LBS News - Stay abreast of geospatial technologies with daily updates
See Your Message Here |
|
|
|
