Feeds

First PocketPC virus found

Proof of concept

  • alert
  • submit to reddit

Choosing a cloud hosting partner with confidence

The first computer virus to infect handheld devices running Microsoft's PocketPC OS was discovered over the weekend.

Duts was written by Ratter, of the 29A virus-writing group, as an academic exercise rather than a serious attempt to spread malicious code across handheld computers. The same group created a virus capable of infecting mobile phones running the Symbian OS, called Cabir, in June. Cabir - like Duts - was a proof-of-concept exercise. In both instances, 29A sent its malicious code straight to anti-virus firms.

Mikko Hyppönen, director of anti-virus research at Finnish AV firm F-Secure, said it's easier to write virus for PocketPC than Symbian. "There are well documented procedures for porting applications from one version of Windows to the other. We expected PocketPC viruses to come first perhaps the fact that they didn't shows virus writers are among the many people to have Symbian smart phones. Virus writers are more likely to target gadgets they have themselves," he added.

Duts is a traditional parasitic virus but it's hardly much of a threat because the virus asks for permission before spreading to other files. Once an infected file is launched, it displays the following dialogue box: "Dear User, am I allowed to spread?" If the user clicks yes, Duts infects executable files located in My Device (root directory) of a PocketPC. Duts does not appear to have any destructive payload.

In theory, Duts can reach mobile devices by email or the Internet, through removable memory, by synchronization with a PC or through Bluetooth. The virus is also capable of infecting mobile phones running ARM-based version of PocketPC.

"We don't expect a major outbreak," said Eugene Kaspersky, head of anti-virus Research at Kaspersky Labs. "Duts is unable to spread independently, only infects a limited number of files, and signals its presence in the system when attempting to propagate." ®

Related stories

Virus attacks mobiles via Bluetooth
First 64-bit Windows virus sighted
Win2k virus beats Win2k to release
Risks from hybrid Linux / Windows virus low
Exploit Code on Trial

Beginner's guide to SSL certificates

More from The Register

next story
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
FYI: OS X Yosemite's Spotlight tells Apple EVERYTHING you're looking for
It's on by default – didn't you read the small print?
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
Kill off SSL 3.0 NOW: HTTPS savaged by vicious POODLE
Pull it out ASAP, it is SWISS CHEESE
Facebook slurps 'paste sites' for STOLEN passwords, sprinkles on hash and salt
Zuck's ad empire DOESN'T see details in plain text. Phew!
China is ALREADY spying on Apple iCloud users, watchdog claims
Attack harvests users' info at iPhone 6 launch
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.