Geekzone: technology news, blogs, forums
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
MARA Discovers First PC to Handheld Crossover Malware
Posted on 26-Feb-2006 16:26. | Tags Filed under: News.

The Mobile Malware Researchers Association (MARA) has found what is believed to be the first malware to cross-infect a handheld PDA from a binary on the desktop PC.

The malware, a Trojan dubbed “crossover”, spreads from a Win32 desktop machine to a Windows Mobile Pocket PC handheld.

Detailed analysis and the malware binary are available to antivirus companies and security experts who qualify for MARA membership, which is free.

This proof of concept virus spreads from a desktop PC to a Windows CE or Windows Mobile device by running on every startup through an entry in the the registry, proceeding to wait for an Activesync connection to be detected. In every boot the virus recreates itself and again add new startup commands to the registry, which could over time lead to performance degradation on the host PC.

When an ActiveSync connection is detected the virus copies itself to the mobile device and starts executing on the PDA. It will erase all files in the \My Documents directory of the device, copy itself to the \Windows directory, and creates a shortcut to the copy in \Windows\startup.

The crossover virus was written in C# (C Sharp) using Visual Studio .NET 2003, and the Communications Library of

It should run on any Windows handheld device running Windows CE or Windows Mobile and .NET Compact Framework 1.1.

More information:

comments powered by Disqus

Trending now »

Hot discussions in our forums right now:

Street Harassment - I'm looking at you Max Key
Created by gzt, last reply by gzt on 28-Oct-2016 20:04 (78 replies)
Pages... 4 5 6

Gigabit cable now available
Created by sub, last reply by Pumpedd on 28-Oct-2016 21:25 (242 replies)
Pages... 15 16 17

Parking Breach Notices
Created by cisconz, last reply by wasabi2k on 28-Oct-2016 15:28 (19 replies)
Pages... 2

RNZAF Boeing 757 breaks down when carrying PM. RNZAF must have an atrocious dispatch reliability figure.
Created by amiga500, last reply by frankv on 28-Oct-2016 13:21 (91 replies)
Pages... 5 6 7

New MacBook Pro
Created by ajobbins, last reply by JoshWright on 28-Oct-2016 18:27 (17 replies)
Pages... 2

Is it me, or have Trade Me prices increased?!
Created by Geektastic, last reply by mattwnz on 27-Oct-2016 14:58 (32 replies)
Pages... 2 3

Disagreement with tradesman over invoice - escalation path
Created by timmmay, last reply by timmmay on 28-Oct-2016 17:08 (30 replies)
Pages... 2

The Quest for the Holy Grail - aka VDSL
Created by cynnicallemon, last reply by hio77 on 28-Oct-2016 16:56 (15 replies)