Threat Description

Skulls.F

Details

Category: Malware
Platform: W32
Aliases: Skulls.F, SymbOS/Skulls.F

Summary


Skulls.F is an edited version of Skulls.D SIS file trojan, it contains several variants of Cabir worm, and several copies of Locknut.B trojan.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.



Technical Details


Skulls.F is still under analysis, detailed information will be provided in near future.

Spreading in: Simworks.SIS and WMAcodec.sis

Payload

Replaces built in and third party applications with non-functional ones, installs Cabir worm variants, Locknut.B trojan and starts animation that shows flashing skull picture.



Detection


Generic detection that detects Skulls.F was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in

Detection Type: Mobile
Database: database build number 15



Description Details: Jarno Niemela March 22nd, 2005
Description Last Modified: Jarno Niemela March 29th, 2005


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More