1. /
  2. Security Response/
  3. SymbOS.Lasco.A

SymbOS.Lasco.A

Risk Level 1: Very Low

Discovered:
January 10, 2005
Updated:
February 13, 2007 12:31:43 PM
Type:
Worm, Virus
Systems Affected:
EPOC


SymbOS.Lasco.A is a Symbian Series 60 Bluetooth worm that also infects .sis archives. The worm is based on SymbOS.Cabir, except it also searches for .SIS files on the device and adds itself to them.

Note: Definitions dated prior to January 10, 2005 detect this threat as SymbOS.Cabir.



Symantec recommends the following to protect against this threat:
  • If Bluetooth is not required, it should be turned off.
  • If you require the use of Bluetooth, ensure that the device's visibility setting is set to "Hidden" so that it cannot be scanned by other Bluetooth devices.
  • Avoid use of device pairing. If it must be used, ensure that all paired devices are set to "Unauthorized". This requires each connection request to be authorized by the user.
  • Do not accept unsigned applications (no digital signature) or applications sent from unknown sources. Be absolutely sure of the origin of the application before accepting it.


Antivirus Protection Dates

  • Initial Rapid Release version January 11, 2005
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version January 11, 2005
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date January 12, 2005
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Eric Chien

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver