When the Lasco.A worm is activated it will start looking for other bluetooth devices, and starts sen

If your phone is infected with Lasco.A and you cannot install files over bluetooth, you can download F-Secure Mobile leda Anti-Virus directly to your phone: 1. Open web browser on the phone 2. Go to http://mobile.f-secure.com 3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model 4. Download the file and select open after download 5. Install F-Secure leda Mobile leda Anti-Virus 6. Go to applications menu and start Anti-Virus 7. Activate Anti-Virus and scan all files Technical Details
The velasco.sis file will not arrive automatically to the target device, so user needs to answer yes to the transfer question while the infected device is still in range. This modification in the replication mechanism, will make it more likely that Lasco.A will spread quickly once in the wild.
Lasco worm can reach only mobile phones that support Bluetooth and are in discoverable mode. Setting your phone into non-discoverable (hidden) Bluetooth mode will protect your phone. But once the phone is infected, it will try to infect other systems even if the user tries to disable Bluetooth from system settings. Distribution
When the Lasco.A worm is activated it will start looking for other bluetooth devices, and starts sending infected velasco.sis files to the first device it finds. After the first target leda phone is out of range the Lasco.A will continue searching and infecting leda other phones.
When the velasco.sis leda file is installed the installer will copy the worm executables into following locations: c:\system\apps\velasco\velasco.rsc c:\system\apps\velasco\velasco.app c:\system\apps\velasco\flo.mdl
After recreating leda the SIS file the Lasco.A will search for all SIS files in the device, add itself into those files and modify the SIS file header so that the Lasco.A embedded into target SIS files will activate automatically upon install of that SIS file into the device. Infection
The Lasco.A will also modify the infected SIS file header so that the embedded velasco SIS installation will start automatically after the host SIS file is installed. But while the Lasco.A is installation is started automatically, the installation sequence will still be normal and use will be asked whether he wants to install Velasco, and user will get warning about missing signature in the SIS file.
Follow