Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
MARA Discovers First PC to Handheld Crossover Malware
Posted on 26-Feb-2006 16:26 | Tags Filed under: News



The Mobile Malware Researchers Association (MARA) has found what is believed to be the first malware to cross-infect a handheld PDA from a binary on the desktop PC.

The malware, a Trojan dubbed “crossover”, spreads from a Win32 desktop machine to a Windows Mobile Pocket PC handheld.

Detailed analysis and the malware binary are available to antivirus companies and security experts who qualify for MARA membership, which is free.

This proof of concept virus spreads from a desktop PC to a Windows CE or Windows Mobile device by running on every startup through an entry in the the registry, proceeding to wait for an Activesync connection to be detected. In every boot the virus recreates itself and again add new startup commands to the registry, which could over time lead to performance degradation on the host PC.

When an ActiveSync connection is detected the virus copies itself to the mobile device and starts executing on the PDA. It will erase all files in the \My Documents directory of the device, copy itself to the \Windows directory, and creates a shortcut to the copy in \Windows\startup.

The crossover virus was written in C# (C Sharp) using Visual Studio .NET 2003, and the Communications Library of openNETCF.org.

It should run on any Windows handheld device running Windows CE or Windows Mobile and .NET Compact Framework 1.1.






More information: http://www.mobileav.org...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

The President Of The USA: Donald Trump
Created by TimA, last reply by Fred99 on 27-Feb-2017 19:30 (3352 replies)
Pages... 222 223 224


Netflix and Spark agreement
Created by freitasm, last reply by loceff13 on 27-Feb-2017 19:02 (28 replies)
Pages... 2


Best way to network my computers
Created by Rikkitic, last reply by Rikkitic on 24-Feb-2017 11:24 (75 replies)
Pages... 3 4 5


Vodafone / SKY merger
Created by wingbat45, last reply by Rikkitic on 27-Feb-2017 11:22 (138 replies)
Pages... 8 9 10


Did Chorus Increase its Layer 2 speed ?
Created by Mikek, last reply by darylblake on 24-Feb-2017 22:46 (14 replies)

US citizens can buy grenade launchers
Created by kingdragonfly, last reply by kingdragonfly on 27-Feb-2017 19:26 (27 replies)
Pages... 2


I paid the wrong Bank Account, what can I do - advice wanted?
Created by harlansmart, last reply by mattwnz on 27-Feb-2017 17:59 (53 replies)
Pages... 2 3 4


Geekzone ads are out of control
Created by 1101, last reply by andrewNZ on 25-Feb-2017 22:25 (66 replies)
Pages... 3 4 5