What does this virus do?

Arriving on your phone as an installation package for SMS Bomber, once installed it sends SMS and MMS messages to a predetermined number that will charge you premium rates for each message.

SymbOS/Flocker.B arrives as a SIS installation package for an application named “SMS Bomber”. It affects Symbian devices that support the running of Python scripts. It targets phones that use SIM cards from Indonesian service provider Indosat and subscribing to their IM3 and/or Mentari packages:

Upon installation, it displays the following message:

It then appears in the phone’s Menu as follows:

SymbOS/Flocker.B has two main components, both of which are python scripts. The first script locks the phone’s keypad and messaging application. The second script attempts to send SMS and MMS messages to a specific account set up by the virus authors. The compromised user may be charged at premium rates for these messages.

1. Go to the device’s Application Manager and remove/uninstall applications named “SMS Bomber”. The Trojan’s splash screen will be displayed again during un-installation.
2. Scan your mobile device using UMU Scan and delete all files detected as SymbOS/Flocker.B