Alias/es

Detection Availability

Visible Symptoms

Many applications no longer work after infection by this virus.

Detailed Analysis

SymbOS/Skulls.F!tr - 06-08-01

General Info:

This threat has a file size: 99413

Installation to System:

• Drops the following files:
  !:\system\install\autoexecdaemon.sis !:\system\install\comcoder.sis !:\sounds\digital\002.sis !:\images\images01.sis

More Info:

1. It is a Symbian virus, packed in .sis format.

2. Drops the following files to disable the relevant applications in the phone:

     !:\system\apps\[yuan]\[yuan].aif
     !:\system\apps\[yuan]\[yuan].app
     !:\system\apps\[yuan]\[yuan].rsc
     !:\system\apps\[yuan]\[yuan]_caption.rsc
     !:\system\apps\[yuan]\flo.mdl
     !:\system\apps\btui\btui.aif
     !:\system\apps\btui\btui.app
     !:\system\apps\btui\btui.r01
     !:\system\apps\btui\btui.r13
     !:\system\apps\btui\btui_caption.r01
     !:\system\apps\btui\btui_caption.r13
     !:\system\apps\fexplorer\fexplorer.aif
     !:\system\apps\fexplorer\fexplorer.app
     !:\system\apps\fexplorer\fexplorer.rsc
     !:\system\apps\fexplorer\fexplorer_caption.rsc
     !:\system\apps\fexplorer\flo.mdl
     !:\system\apps\file\file.aif
     !:\system\apps\file\file.app
     !:\system\apps\file\file.rsc
     !:\system\apps\file\file_caption.rsc
     !:\system\apps\file\flo.mdl
     !:\system\apps\freakbtui\freakbtui.aif
     !:\system\apps\freakbtui\freakbtui.app
     !:\system\apps\freakbtui\freakbtui.r01
     !:\system\apps\freakbtui\freakbtui.r13
     !:\system\apps\freakbtui\freakbtui_caption.r01
     !:\system\apps\freakbtui\freakbtui_caption.r13
     !:\system\apps\smartfileman\flo.mdl
     !:\system\apps\smartfileman\smartfileman.aif
     !:\system\apps\smartfileman\smartfileman.app
     !:\system\apps\smartfileman\smartfileman.rsc
     !:\system\apps\smartfileman\smartfileman_caption.rsc
     !:\system\apps\smartmovie\flo.mdl
     !:\system\apps\smartmovie\smartmovie.aif
     !:\system\apps\smartmovie\smartmovie.app
     !:\system\apps\smartmovie\smartmovie.rsc
     !:\system\apps\smartmovie\smartmovie_caption.rsc
     !:\system\apps\systemexplorer\flo.mdl
     !:\system\apps\systemexplorer\systemexplorer.aif
     !:\system\apps\systemexplorer\systemexplorer.app
     !:\system\apps\systemexplorer\systemexplorer.rsc
     !:\system\apps\systemexplorer\systemexplorer_caption.rsc

3. Replaces the application