Locknut how to fix it

 

This site is a free information base of anti virus knowledge which is sponsered and kept free thanks to the sponsership of UMU mobile antivirus....please visit our sponsers link to keep mobile-antivirus.org free.

Locknut can be manually downloaded or spread as a SIS installation package named Patch.SIS or Patch_v1.SIS. It has no means of propagating by itself.

When it is installed in a compromised device, it drops the following files:

C:\system\apps\gavno\gavno.app
C:\system\apps\gavno\gavno.rsc
C:\system\apps\gavno\gavno_caption.rsc

These files contain data crafted in such a way that, when interpreted by the phone, causes the phone’s special buttons to be locked or disabled. Only the phone’s alpha-numeric buttons remain operational.

SymbOS/Locknut also drops a copy of the SIS installation package in the phone’s C drive:

C:\Patch.SIS

It affects phones running the Symbian S60 platform. Some phones affected by SymbOS/Cabir include the following:

Nokia 3650, 3600
Nokia 3660, 3620
Nokia 6600
Nokia 6620
Nokia 7610
Nokia 7650
Nokia N-Gage
Panasonic X700
Sendo X
Siemens SX1

The following message is displayed by this malware during installation:

Wonderful patch by artik100 :)

Manual Disinfection

To disinfect a compromised device, it is necessary to reformat the C drive. All data saved in the C drive will be lost during a format.

Home | Site Map | Contact Us | Links Directory