This site is a free information base of anti virus knowledge which is sponsered and kept free thanks to the sponsership of UMU mobile antivirus....please visit our sponsers link to keep mobile-antivirus.org free.
Locknut can be manually downloaded or spread as a SIS installation package named Patch.SIS or Patch_v1.SIS. It has no means of propagating by itself.
When it is installed in a compromised device, it drops the following files:
These files contain data crafted in such a way that, when interpreted by the phone, causes the phone’s special buttons to be locked or disabled. Only the phone’s alpha-numeric buttons remain operational.
SymbOS/Locknut also drops a copy of the SIS installation package in the phone’s C drive:
It affects phones running the Symbian S60 platform. Some phones affected by SymbOS/Cabir include the following:
Nokia 3650, 3600
Nokia 3660, 3620
The following message is displayed by this malware during installation:
Wonderful patch by artik100 :)
To disinfect a compromised device, it is necessary to reformat the C drive. All data saved in the C drive will be lost during a format.