Skulls.V is a SIS file trojan that pretends to be installation file for Battery Extender software.
When installed Skulls.V disables several built in applications, drops component files from Locknut.A, Doomboot.A and installs Cabir.B and Cabir.X
In addition of directly installing damaging files, Skulls.V also drops MGDropper.A into the device.
Skulls.V also installs a pirate copied version of Simworks Anti-Virus into the device.
Disinfection with two Series 60 phones
Download F-Skulls from ftp://ftp.f-secure.com/anti-virus/tools/f-skulls.zip or directly with phone http://www.europe.f-secure.com/tools/f-skulls.sis
Spreading inXimplyfy Battery Extender.sis
DetectionGeneric detection that detects Skulls.V was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in database build number 15.
Write-up:Mika Tolvanen and Jarno Niemela November 18th, 2005;