Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
MARA Discovers First PC to Handheld Crossover Malware
Posted on 26-Feb-2006 16:26. | Tags Filed under: News.



The Mobile Malware Researchers Association (MARA) has found what is believed to be the first malware to cross-infect a handheld PDA from a binary on the desktop PC.

The malware, a Trojan dubbed “crossover”, spreads from a Win32 desktop machine to a Windows Mobile Pocket PC handheld.

Detailed analysis and the malware binary are available to antivirus companies and security experts who qualify for MARA membership, which is free.

This proof of concept virus spreads from a desktop PC to a Windows CE or Windows Mobile device by running on every startup through an entry in the the registry, proceeding to wait for an Activesync connection to be detected. In every boot the virus recreates itself and again add new startup commands to the registry, which could over time lead to performance degradation on the host PC.

When an ActiveSync connection is detected the virus copies itself to the mobile device and starts executing on the PDA. It will erase all files in the \My Documents directory of the device, copy itself to the \Windows directory, and creates a shortcut to the copy in \Windows\startup.

The crossover virus was written in C# (C Sharp) using Visual Studio .NET 2003, and the Communications Library of openNETCF.org.

It should run on any Windows handheld device running Windows CE or Windows Mobile and .NET Compact Framework 1.1.






More information: http://www.mobileav.org...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

Gareth Morgan is a genius
Created by Satch, last reply by tdgeek on 11-Dec-2016 18:12 (185 replies)
Pages... 11 12 13


NZ Prime Minister John Key Resigns
Created by ajobbins, last reply by Fred99 on 11-Dec-2016 07:35 (222 replies)
Pages... 13 14 15


The President Of The USA - Who do you think?
Created by TimA, last reply by DarthKermit on 10-Dec-2016 20:29 (913 replies)
Pages... 59 60 61


Spark wireless broadband and home /lan access: CGNAT limitations
Created by yokkem, last reply by BarTender on 8-Dec-2016 15:57 (19 replies)
Pages... 2


Spark not planning to deploy native IPv6 at all. Ever.
Created by Erayd, last reply by sbiddle on 7-Dec-2016 20:57 (19 replies)
Pages... 2


Woooaaahh earthquake 2016-11-14
Created by Fred99, last reply by DarthKermit on 9-Dec-2016 16:16 (471 replies)
Pages... 30 31 32


Wilson's Car Park - When Free is not free
Created by nzkiwiman, last reply by cr250bromo on 9-Dec-2016 09:30 (51 replies)
Pages... 2 3 4


Gigabit cable now available
Created by sub, last reply by chiefie on 8-Dec-2016 17:38 (733 replies)
Pages... 47 48 49