Summary

Summary
Action
More Information
| Affected operating systems | Windows Mobile |
|---|---|
| Included in our products from | April 2008 (4.28) |
| Protection available since | 27 February 2008 16:42:01 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
WCE/Meiti-A is a worm for the Windows Mobile platform.
WCE/Meiti-A arrives bundled with the different legitimate applications including games, Google maps etc.
WCE/Meiti-A includes functionality to
-steal confidentional information
-spread through available storage devices
-upload files including updates of itself
-lower security settings disabling application installation warning
Once installed WCE/Meiti-A copies itself to the following files:
<Windows>\mservice.exe
<Windows>\setup.cfg
<Windows>\mservice2.exe
\<%s>\2577\autorun.exe
