Sophos

WCE/Meiti-A

Aliases
  • WinCE/InfoJack
  • WinCE/Mepos.A
  • WinCE.Infomeiti
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows Mobile
Included in our products from April 2008 (4.28)
Protection available since 27 February 2008 16:42:01 (GMT)
Detected by All Sophos products

Action

More Information

WCE/Meiti-A is a worm for the Windows Mobile platform.

WCE/Meiti-A arrives bundled with the different legitimate applications including games, Google maps etc.

WCE/Meiti-A includes functionality to

-steal confidentional information
-spread through available storage devices
-upload files including updates of itself
-lower security settings disabling application installation warning

Once installed WCE/Meiti-A copies itself to the following files:

<Windows>\mservice.exe
<Windows>\setup.cfg
<Windows>\mservice2.exe
\<%s>\2577\autorun.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer