Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Malware Information Pages: Worm:SymbOS/Beselo
[Summary] | [Disinfection] | [Detailed Description]

Name : Worm:SymbOS/Beselo
Alias:Worm:SymbOS/Beselo.D, Worm:SymbOS/Beselo.C, Beselo
Type:Bluetooth-Worm
Category:Malware
Platform:SymbOS
Date of Discovery:December 21, 2007
Radar

Summary
Beselo is a MMS and Bluetooth worm family that operates on Symbian S60 Second Edition devices.

The Beselo family is very similar to the Commwarrior family but contains enough differences in the code base and behavior that it is counted as separate family.
Back to the Top

Disinfection

Disinfecting using F-Secure Mobile Anti-Virus
  1. Download F-Secure Mobile Anti-Virus from http://f-secure.mobi
    and activate the Anti-Virus
  2. Scan the phone and remove any components of the malware
  3. Reboot the phone to remove memory resident components
Back to the Top

Detailed Description
Beselo worms spread via Bluetooth and MMS as Symbian SIS installation files.

The installation file is not labeled with the .SIS extension. The SIS file is named with MP3, JPG, or RM extensions in order to trick the recipient into thinking that it is multimedia file.

If the phone user attempts to open the file, Symbian will recognize it as an installation file and will start the application installer.

Please see the following variant descriptions for additional details:
Additional Notes:

Variants Beselo.C and Beselo.D are closely related to Beselo.B.
Back to the Top



F-Secure Corporation

Last Modified: March 06, 2008