Which one of you Created this WM Virus?

[Houdini7]

US-CERT is aware of reports of a trojan that affects Microsoft Windows CE. This trojan disables Windows Mobile application installation security.

The trojan may take any or all of the following actions on the mobile device:

* spreads via seemingly legitimate application installation files
* installs as an autorun program on the memory card
* installs itself to the device when an infected memory card is inserted
* protects itself from deletion by copying itself back to disk
* replaces the browser's homepage
* allows unsigned applications to install without warning

US-CERT encourages users to take the following preventative measures to help mitigate the security risks:

* Install anti-virus software on the mobile device, and keep its virus signature files up-to-date.
* Use caution when downloading and installing applications.

US-CERT will continue to provide more information as it becomes available.

http://blogs.zdnet.com/security/?p=904

Apparently it's targeted at WM devices, and is in the wild.

CERT has a waning too:
http://www.us-cert.gov/current/index.html#microsoft_wince_trojan

[NRGZ28]

I'll tell you who created it. One of the companies that sells the useless "anti-virus software" for our smartphones! LOL Now they can actually sell it... :p

[Noiro]

I'll tell you who created it. One of the companies that sells the useless "anti-virus software" for our smartphones! LOL Now they can actually sell it... :p

^^^^^^^^^^^http://forum.brighthand.com/images/smilies/yup.gif

[TheChampJT]

well be sure to check the guy who posted a thread about creating viruses, right here in our forum!!!

[haiopei]

This statement i agree.
Up to now WM was the only safest Windows been. :D

[Malicieux]

I really have seen anti-virus soft for ppc, and always wondered is there a viruses for ppc? Now I know they exist :D I wondered the same about Linux. But never heard of "virus for *nix".

[the0ne]

I really have seen anti-virus soft for ppc, and always wondered is there a viruses for ppc? Now I know they exist :D I wondered the same about Linux. But never heard of "virus for *nix".

http://en.wikipedia.org/wiki/List_of_Linux_computer_viruses :eek:

[wuub]

I'll tell you who created it. One of the companies that sells the useless "anti-virus software" for our smartphones! LOL Now they can actually sell it... :p

Could not agree more

[Chalky]

" Timing"

One of McAfee's screenshots shows the autorun.exe trojan as having a creation date of 25th may 2006. Thats nearly 2 years ago - have McAfee really just discovered it now, or have they just been sitting on the discovery... Que publicity of their mobile antivirus software coming to the rescue for every paranoid corporate IT Manager....

[Houdini7]

well be sure to check the guy who posted a thread about creating viruses, right here in our forum!!!

I remember that thread from a few days ago, then saw the CERT issue...
A coincidence? :)

[adempozhari]

I really have seen anti-virus soft for ppc, and always wondered is there a viruses for ppc? Now I know they exist :D I wondered the same about Linux. But never heard of "virus for *nix".
i am happy because i will not feel anymore as an idiot when update my antivirus(mobile).
anyway i want to be in contact with this.....

[NRGZ28]

I think the first part of your statement is still true.... :D

[mchapman007]

Are we going to start seeing ppc anti virus banners now?

[HaiLe512]

Anti virus for ppc? Why? unlike PC we could reset the ppc and get back the fresh rom in 10 mins.

Moderator, pls kill this useless thread. :mad:

[dwny]

Anti virus for ppc? Why? unlike PC we could reset the ppc and get back the fresh rom in 10 mins.

Moderator, pls kill this useless thread. :mad:


Even though recovery is simple and with all the ROM flashing that goes on...virus' don't stand a chance; people need to be informed.

This thread is not useless and leave it to the moderators to decide this.

Two new articles:

http://www.avertlabs.com/research/blog/index.php/2008/02/26/windows-mobile-trojan-sends-unauthorized-information-and-leaves-device-vulnerable/

http://www.pocketpcthoughts.com/index.php?action=expand,58603

I personally think that AV (Anti-Virus) Developers (Norton, McAfee, etc.) want some of this PPC $.

[Noonski]

Now why would anyone from XDA make a virus while there is anuogh spyware to kill that MS tries to enforce on Windows Mobile?

[bryk]

Here is a source code of the first ppc virus

[Noonski]

Yeah in the last T-Mobile NL 2.26 Rom for ELf they allso included a download link to AV. Made it even slower.

[initial]

After putting TomTom on my SD card I noticed that every time I inserted or removed the card I got an error message about AutoRun.exe not being digitally signed or an invalid application.

Looking at the screenshots (http://www.avertlabs.com/research/blog/index.php/2008/02/26/windows-mobile-trojan-sends-unauthorized-information-and-leaves-device-vulnerable/) I noticed the folder name was 2577 (same as the TomTom installation folder.) TomTom auto installs when you enter the TomTom miniSD card into your phone, so I assumed that the autorun.exe was part of that implementation.

I don't think this is the virus as my homepage stayed intact but you never know.

[devanl]

Where's the link for download? :)