|
| |
|
Introducing the First Virus for Windows Mobile Pocket PC July 17, 2004 [Pocket PC] | By Edward J. R. We have a feeling that some software development companies are releasing Windows Mobile viruses inidirectly just to dupe corporations into buying their anti-virus software: malware writer from 29A labs has released the first ever virus to infect the Windows Mobile Pocket PC platform and then they even write Thanks to Ratter of 29A for providing the virus ![]() The company offers even FREE (for personal use, corporations must pay big bucks) anti-virus software, that... ... can be downloaded here. WinCE4.Dust is the first known Windows CE virus to run on ARM based devices running Windows Mobile Pocket PC. It was released to our antivirus researchers today by its author, Ratter, of the virus-writing group known as 29a. (“29a” is the hex equivalent of the number “666”). This is a live, working proof of concept virus that infects all .EXE files in the root directory of the Pocket PC device. WinCE4.Dust does no serious or permanent damage to the infected device, with the exception of infecting .exe files in the root directory. Infected files will run the viral code on execution and will then continue to operate as normal. [...] Airscanner Mobile Antivirus has an active detection component known as Active Guard (AG). AG acts like a host-based intrusion detection program (e.g., like a Tripwire for the Pocket PC). AG will detect any infection process during execution of the virus and will alert the user via a popup dialog window. Airscanner has also extracted a virus signature that will detect all infected files. In order to delete or quarantine the infected files, the user must first soft reset the device. Independent user detection of this virus is difficult because the virus only infects existing .exe files. It does not create new files or alter registry settings. As a result, the only way a user will know if he is infected is if he notices a subtle change in file size, which is unlikely. To read more click here.
|
| ||||||
| |