BitDefender now lists on its database of active malware what could possibly be the first of its type for Windows Mobile Pocket PC devices. The WinCE.Dust.A is executable program with a very low propagation rate, discovered on 16 July. It's reported to be a proof of concept for Pocket PC devices. The file size is 1530 bytes only.
Like the CABIR virus for Symbian smart phones, the WinCE.Dust.A requires user intervention for the install to occur. The virus infects PE files (ARM) in root (My Device) directory of Windows CE devices. The virus displays a message box, asking for user's permission to spread to other files. It includes the following strings: "This code arose from the dust of Permutation City" and "This is proof of concept code. Also, i wanted to make avers happy.The situation when Pocket PC antiviruses detect only EICAR file had to end ..."
The BitDefender website does not list a current removal tool, or any more detailed information.
