The most award-winning anti-spyware software
Get serious about removing spyware with Spy Sweeper - the award-winning anti-spyware software trusted by millions of home computer users.
$29.95
Spyware & Virus Directory
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
SymbOS.Skulls
Risk Level 1: Very Low
Discovered: November 19, 2004
Updated: November 22, 2004 12:24:15 PM PST
Also Known As: Skulls [F-Secure], SymbOS/Skulls [McAfee], SYMBOS_SKULLS.A [Trend Micro]
Type: Trojan Horse
Infection Length: 1,192,117 bytes
Systems Affected: EPOC
SUMMARY
SymbOS.Skulls is a Trojan horse that replaces the system files on the device, causing application icons to be replaced with a skull icon. By default, the Trojan has the file name "Extended Theme.sis."
Protection
- Virus Definitions (LiveUpdate™ Weekly) November 23, 2004
- Virus Definitions (Intelligent Updater) November 20, 2004
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
TECHNICAL DETAILS
When SymbOS.Skulls is executed, it performs the following actions:
- Changes the icons of most applications to a skull icon displayed below:
- Causes most applications to no longer function.
- Installs the following files:
- C:SystemLibsLIB.DLL
- C:SystemLibssoftwarecopier200.dll
- C:SystemLibs otification.cmd
- C:SystemLibslmpro.r02
- C:SystemLibslmpro.r01
- C:SystemLibslicencemanager20s.dll
- C:SystemAppsWALLETAVOTAWALLETAVOTA.APP
- C:SystemAppsWALLETAVOTAWALLETAVOTA.aif
- C:SystemAppsWALLETAVMGMTWALLETAVMGMT.APP
- C:SystemAppsWALLETAVMGMTWALLETAVMGMT.aif
- C:SystemAppsVoicerecorderVoicerecorder.app
- C:SystemAppsVoicerecorderVoicerecorder.aif
- C:SystemAppsVmVm.app
- C:SystemAppsVmVm.aif
- C:SystemAppsVCommandVCommand.app
- C:SystemAppsVCommandVCommand.aif
- C:SystemAppsUssdUssd.app
- C:SystemAppsUssdUssd.aif
- C:SystemAppsToDoToDo.app
- C:SystemAppsToDoToDo.aif
- C:SystemAppsSysApSysAp.app
- C:SystemAppsSysApSysAp.aif
- C:SystemAppsStartupStartup.app
- C:SystemAppsStartupStartup.aif
- C:SystemAppsSpeeddialSpeeddial.app
- C:SystemAppsSpeeddialSpeeddial.aif
- C:SystemAppsSmsViewerSmsViewer.app
- C:SystemAppsSmsViewerSmsViewer.aif
- C:SystemAppsSmsEditorSmsEditor.app
- C:SystemAppsSmsEditorSmsEditor.aif
- C:SystemAppsSimDirectorySimDirectory.app
- C:SystemAppsSimDirectorySimDirectory.aif
- C:SystemAppsSdnSdn.app
- C:SystemAppsSdnSdn.aif
- C:SystemAppsScreenSaverScreenSaver.app
- C:SystemAppsScreenSaverScreenSaver.aif
- C:SystemAppsSchemeAppSchemeApp.app
- C:SystemAppsSchemeAppSchemeApp.aif
- C:SystemAppsSatuiSatui.app
- C:SystemAppsSatuiSatui.aif
- C:SystemAppsPushViewerPushViewer.app
- C:SystemAppsPushViewerPushViewer.aif
- C:SystemAppsPSLNPSLN.app
- C:SystemAppsPSLNPSLN.aif
- C:SystemAppsProvisioningCxProvisioningCx.app
- C:SystemAppsProvisioningCxProvisioningCx.aif
- C:SystemAppsProfileAppprofileapp.app
- C:SystemAppsProfileAppProfileApp.aif
- C:SystemAppsPRESENCEPRESENCE.APP
- C:SystemAppsPRESENCEPRESENCE.aif
- C:SystemAppsPinboardPinboard.app
- C:SystemAppsPinboardPinboard.aif
- C:SystemAppsPhonebookPhonebook.app
- C:SystemAppsPhonebookPhonebook.aif
- C:SystemAppsPhonePhone.app
- C:SystemAppsPhonePhone.aif
- C:SystemAppsNSmlDSSyncNSmlDSSync.app
- C:SystemAppsNSmlDSSyncNSmlDSSync.aif
- C:SystemAppsNSmlDMSyncNSmlDMSync.app
- C:SystemAppsNSmlDMSyncNSmlDMSync.aif
- C:SystemAppsNpdViewerNpdViewer.app
- C:SystemAppsNpdViewerNpdViewer.aif
- C:SystemAppsNotepadNotepad.app
- C:SystemAppsNotepadNotepad.aif
- C:SystemAppsMusicPlayerMusicPlayer.app
- C:SystemAppsMusicPlayerMusicPlayer.aif
- C:SystemAppsMsgMailViewerMsgMailViewer.app
- C:SystemAppsMsgMailViewerMsgMailViewer.aif
- C:SystemAppsMsgMailEditorMsgMailEditor.app
- C:SystemAppsMsgMailEditorMsgMailEditor.aif
- C:SystemAppsMmsViewerMmsViewer.app
- C:SystemAppsMmsViewerMmsViewer.aif
- C:SystemAppsMmsEditorMmsEditor.app
- C:SystemAppsMmsEditorMmsEditor.aif
- C:SystemAppsMMMMMM.app
- C:SystemAppsmmcappmmcapp.app
- C:SystemAppsmmcappmmcapp.aif
- C:SystemAppsMenuMenu.app
- C:SystemAppsMenuMenu.aif
- C:SystemAppsMediaSettingsMediaSettings.app
- C:SystemAppsMediaSettingsMediaSettings.aif
- C:SystemAppsMediaPlayerMediaPlayer.app
- C:SystemAppsMediaPlayerMediaPlayer.aif
- C:SystemAppsMediaGalleryMediaGallery.app
- C:SystemAppsMediaGalleryMediaGallery.aif
- C:SystemAppsmcemce.app
- C:SystemAppsmcemce.aif
- C:SystemAppsLogsLogs.app
- C:SystemAppsLogsLogs.aif
- C:SystemAppslocationlocation.app
- C:SystemAppslocationlocation.aif
- C:SystemAppsImageViewerImageViewer.app
- C:SystemAppsImageViewerImageViewer.aif
- C:SystemAppsGSgs.app
- C:SystemAppsGSGS.aif
- C:SystemAppsFileManagerFileManager.app
- C:SystemAppsFileManagerFileManager.aif
- C:SystemAppsDictionarydictionary.app
- C:SystemAppsDictionaryDictionary.aif
- C:SystemAppsDdViewerDdViewer.app
- C:SystemAppsDdViewerDdViewer.aif
- C:SystemAppscshelpcshelp.app
- C:SystemAppscshelpcshelp.aif
- C:SystemAppsConverterconverter.app
- C:SystemAppsConverterConverter.aif
- C:SystemAppsConnectionMonitorUiConnectionMonitorUi.app
- C:SystemAppsConnectionMonitorUiConnectionMonitorUi.aif
- C:SystemAppsCodViewerCodViewer.app
- C:SystemAppsCodViewerCodViewer.aif
- C:SystemAppsClockAppClockApp.app
- C:SystemAppsClockAppClockApp.aif
- C:SystemAppsChatChat.app
- C:SystemAppsChatChat.aif
- C:SystemAppsCERTSAVERCERTSAVER.APP
- C:SystemAppsCERTSAVERCERTSAVER.aif
- C:SystemAppsCbsUiAppCbsUiApp.app
- C:SystemAppsCbsUiAppCbsUiApp.aif
- C:SystemAppsCamcorderCamcorder.app
- C:SystemAppsCamcorderCamcorder.aif
- C:SystemAppsCalendarCalendar.app
- C:SystemAppsCalendarCalendar.aif
- C:SystemAppsCalcsoftCalcsoft.app
- C:SystemAppsCalcsoftCalcsoft.aif
- C:SystemAppsvava.app
- C:SystemAppsvava.aif
- C:SystemAppsBtUiBtUi.app
- C:SystemAppsBtUiBtUi.aif
- C:SystemAppsBrowserBrowser.app
- C:SystemAppsBrowserBrowser.aif
- C:SystemAppsAutolockAutolock.app
- C:SystemAppsAutolockAutolock.aif
- C:SystemAppsAppMngrAppmngr.app
- C:SystemAppsAppMngrAppMngr.aif
- C:SystemAppsAppInstAppinst.app
- C:SystemAppsAppInstAppInst.aif
- C:SystemAppsAboutAbout.app
- C:SystemAppsAboutAbout.aif
Recommendations
Symantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":
- Turn off and remove unneeded services. By default, many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server. These services are avenues of attack. If they are removed, blended threats have less avenues of attack and you have fewer services to maintain through patch updates.
- If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.
- Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services (for example, all Windows-based computers should have the current Service Pack installed.). Additionally, please apply any security updates that are mentioned in this writeup, in trusted Security Bulletins, or on vendor Web sites.
- Enforce a password policy. Complex passwords make it difficult to crack password files on compromised computers. This helps to prevent or limit damage when a computer is compromised.
- Configure your email server to block or remove email that contains file attachments that are commonly used to spread viruses, such as .vbs, .bat, .exe, .pif and .scr files.
- Isolate infected computers quickly to prevent further compromising your organization. Perform a forensic analysis and restore the computers using trusted media.
- Train employees not to open attachments unless they are expecting them. Also, do not execute software that is downloaded from the Internet unless it has been scanned for viruses. Simply visiting a compromised Web site can cause infection if certain browser vulnerabilities are not patched.
REMOVAL
To remove SymbOS.Skulls:
- Install a file manager program on the phone.
- Enable the option to view the files in the system directory.
- Delete the malicious .AIF files.
- Use the application manager and uninstall Extended Theme.sis.
Spy Sweeper 5.2 stops spyware in its tracks while offering home computer users the ability to configure the program to suit their specific needs, such as:
Choose a Quick, Full or Custom Sweep: With Spy Sweeper 5.2, you can easily choose to perform a quick, full or customized sweep. If you're looking for an immediate diagnosis, choose a quick sweep. For a pinpointed search, customize your sweep to have Spy Sweeper skip files by folder or file extension. For a deep cleaning, opt for a full sweep.
Exclude Files from a Sweep: Spy Sweeper allows you to save time during a sweep by skipping specific files or different sections of your PC. You can select specific file extension, such as .xls or .mpg to exclude.
Additional Highlights
As soon as it's installed, Spy Sweeper gives 360 degrees of protection against spyware, including:
Simple Sweeps: Detecting spyware and removing unwanted programs found on your computer in three effortless steps
Easy Management: Quickly and simply configure program, sweep and upgrade options
Fast Home: Use the home screen to access the most commonly used functions of Spy Sweeper
Shields Summary: A redesigned shields summary page makes it simple to see at a glance which shields are on or off
Action Alerts: Receive clear, easy-to-understand notifications when new spyware threats are detected
"Spy Sweeper remains a favorite for protection from spyware."
"This program's dominance is apparent as soon as you install it."
