Threat description


Platform: W32


Skulls.V is a SIS file trojan that pretends to be installation file for Battery Extender software.


Disinfection with two Series 60 phones

Download F-Skulls from or directly with phone

  • 1. Install F-Skulls.sis into infected phones memory card with a clean phone
  • 2. Put the memory card with F-Skulls into infected phone
  • 3. The F-Skulls starts automatically upon insertion and frees menu and application manager
  • 4. Go to application manager and uninstall the SIS file in which you installed the Skulls.V
  • 5. Download and install F-Secure Mobile Security on your computer to remove other malware dropped by the Skulls.V, or directly onto the mobile itself
  • 6. Remove the F-Skulls with application manager as the phone is now cleaned

Technical Details

Spreading in: Ximplyfy Battery Extender.sis

When installed Skulls.V disables several built in applications, drops component files from Locknut.A, Doomboot.A and installs Cabir.B and Cabir.X

In addition of directly installing damaging files, Skulls.V also drops MGDropper.A into the device.

Skulls.V also installs a pirate copied version of Simworks Anti-Virus into the device.


Generic detection that detects Skulls.V was published for F-Secure Mobile Anti-Virus on December 13th, 2004 in Detection Type:Mobile
Database:database build number 15

Description Details: Mika Tolvanen and Jarno Niemela November 18th, 2005;


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More