SymbOS.Lasco.A

SymbOS.Lasco.A is a Symbian Series 60 Bluetooth worm that also infects .sis archives. The worm is based on SymbOS.Cabir, except it also searches for .SIS files on the device and adds itself to them.

Note: Definitions dated prior to January 10, 2005 detect this threat as SymbOS.Cabir.



Symantec recommends the following to protect against this threat:

• If Bluetooth is not required, it should be turned off.
• If you require the use of Bluetooth, ensure that the device's visibility setting is set to "Hidden" so that it cannot be scanned by other Bluetooth devices.
• Avoid use of device pairing. If it must be used, ensure that all paired devices are set to "Unauthorized". This requires each connection request to be authorized by the user.
• Do not accept unsigned applications (no digital signature) or applications sent from unknown sources. Be absolutely sure of the origin of the application before accepting it.

Protection

• Initial Rapid Release version January 11, 2005
• Latest Rapid Release version March 3, 2008 revision 035
• Initial Daily Certified version January 11, 2005
• Latest Daily Certified version June 17, 2008 revision 017
• Initial Weekly Certified release date January 12, 2005

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low