Skulls.F is still under analysis, detailed information will be provided in near future.
Spreading inSimworks.SIS and WMAcodec.sis
PayloadReplaces built in and third party applications with non-functional ones, installs Cabir worm variants, Locknut.B trojan and starts animation that shows flashing skull picture.
Generic detection that detects Skulls.F was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in database build number 15.
Write-up:Jarno Niemela March 22nd, 2005;
Description updated:Jarno Niemela March 29th, 2005;