News

  • Home > News

        Something new for Windows CE: a virus

        Doug | Date: Jul 19, 2004 | Comments: 1



        BitDefender Antivirus Labs in Romania has reported what it claims is the first occurrence of malicious code to infect the Windows CE operating system used by over 17 million Pocket PCs, smartphones, and other Internet appliances.


        The virus author, known by the nickname Ratter, is suspected to be part of the famous 29A VX group and created this virus "not meant to spread," but rather as "a proof of concept code."

        (Click here for larger image)

        As shown in the screen shot, the virus just displays a message box, asking for the user's permission to spread to other files. Called WinCE4.Dust, "it infects pocket pc's PE files (ARM) in the root (My Device) directory", as the virus author himself noted in a message thought to be addressed to most antivirus laboratories. It reportedly targets devices based on the ARM processor.

        As was the case with the Cabir virus for the Symbian OS, "The the initiator of the Dust malware has not designed it to propagate on a massive scale, but rather to demonstrate that devices running Microsoft Windows CE can be infected by malicious code," according to Viorel Canja, Head of BitDefender Labs. "The code was first sent to antivirus experts instead of being released in the wild."

        BitDefender has a free antivirus application for Windows CE. Further information on it is here.

        F-Secure of Finland has posted additional details on WinCE4.Dust here.



        Related stories: