F-Secure Virus Descriptions : Skulls.H

Summary

Skulls.H is an edited version of Skulls.D SIS file trojan, it contains several variants of Cabir worm, and several copies of Locknut.B trojan.

Spreading in

NokiaGuard.sis and ScreenSaver.sis

Payload

Replaces built in and third party applications with non-functional ones, installs Cabir worm variants, Locknut.B trojan and starts animation that shows flashing skull picture.

Back to the Top

Detection

Generic detection that detects Skulls.H was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in database build number 15.

Back to the Top

Write-up: Jarno Niemela March 29th, 2005;

F-Secure Corporation