The virus author, known by the nickname Ratter, is suspected to be part of the famous 29A VX group and created this virus "not meant to spread," but rather as "a proof of concept code."
(Click here for larger image)As shown in the screen shot, the virus just displays a message box, asking for the user's permission to spread to other files. Called WinCE4.Dust, "it infects pocket pc's PE files (ARM) in the root (My Device) directory", as the virus author himself noted in a message thought to be addressed to most antivirus laboratories. It reportedly targets devices based on the ARM processor.
As was the case with the Cabir virus for the Symbian OS, "The the initiator of the Dust malware has not designed it to propagate on a massive scale, but rather to demonstrate that devices running Microsoft Windows CE can be infected by malicious code," according to Viorel Canja, Head of BitDefender Labs. "The code was first sent to antivirus experts instead of being released in the wild."
BitDefender has a free antivirus application for Windows CE. Further information on it is
here.
F-Secure of Finland has posted additional details on WinCE4.Dust
here.
Related stories: