Thursday, January 31, 2008

SymbOS/Beselo Symptoms [files]

SymbOS/Beselo attempts to disguise itself as other types of media files under the filenames "beauty.jpg", “love.rm” and “sex.mp3” each of size 59kb[kilo bytes]
and random named exe files each of 79kb.

Your Symbian mobile is infected if you find the following files

  • c:\system\Apps\[random_name].exe : 80912 bytes (79k)
  • c:\system\Apps\[random_name].sis : 60008 bytes (59k)
  • c:\system\recogs\[random_name].mdl : 3296 bytes
  • c:\system\Data\[random_name].exe : 80912 bytes (79k)
  • c:\system\Data\[random_name].dat : 8 bytes
  • c:\system\Data[random_name].ini : 0 bytes
And any of the following files:
  • c:\system\Install\sex.mp3 : 60008 bytes (59k)
  • c:\system\Install\love.rm : 60008 bytes (59k)
  • c:\system\Install\beauty.jpg : 60008 bytes (59k)

No comments: