Windows CE 3.0
1...1 2...3 3 Windows CE 3.0...4 3.1 JS.Internal.f...6 3.1.1...6 3.1.2...7 3.2 JS.Lame...9 3.2.1...9 3.2.2...10 3.3 JS.NastyKiller...11 3.3.1...11 3.3.2...12 3.4 JS.Trojan.Freq.c...13 3.4.1...13 3.4.2...14 3.5 JS.Wobble...15 3.5.1...15 3.5.2...17 3.6 Jscript.Optiz...18 3.6.1...18 3.6.2...19 4...21 4.1 Internet Explorer...22 4.2 Pocket Outlook...23 4.3 WSH...24 5...25 i
1 OS Microsoft Windows CE Version 3.0 Pocket PC Handheld PC 2000 Web Microsoft Pocket Internet Explorer / Microsoft Internet Explorer for Handheld PC JavaScript JScript JavaScript / JScript OS OS Microsoft Windows 98 / Me Windows CE Version 3.0 JavaScript / JScript 6 JS.Internal.f JS.Lame JS.NastyKiller JS.Trojan.Freq.c JS.Wobble (Jscript.NoWobbler) Jscript.Optiz Windows CE Version 3.0 2 OS Pocket PC Handheld PC 2000 2 Pocket PC : CASIO CASSIOPEIA E-750 Microsoft Windows CE Version 3.0.9348 (Build 9503) 1
Handheld PC 2000 : Hewlett Packard hp jornada 720 Microsoft Windows for Handheld PC 2000: Microsoft Windows CE Version 3.0 (Build 9595-126) Windows Me DOS/V Microsoft Internet Explorer Version 6.0 2
2 ( ) ( ) ( ) Windows 98 / Me Internet Explorer Windows CE 3.0 Windows CE 3.0 Windows CE 3.0 3
3 Windows CE 3.0 Windows CE CASIO CASSIOPEIA Hewlett Packard jornada OS Windows CE 3.0 CASSIOPEIA Pocket PC Internet Explorer Pocket Internet Explorer jornada Handheld PC 2000 Internet Explorer for Handheld PC JavaScript JScript JavaScript / JScript JS.Internal.f JS.Lame JS.NastyKiller JS.Trojan.Freq.c JS.Wobble Jscript.Optiz 6 JS.Wobble XML Jscript.Optiz JS HTML (PC) HotSync Version 3.5 USB Microsoft Outlook 2000 Outlook Microsoft Windows CE Pocket Outlook Windows CE 3.0 Internet Explorer 4
1. PC Microsoft ActiveSync 3.5 Windows CE 3.0 ( IPA VIRUSES) 2. PC Windows CE 3.0 USB ActiveSync Windows CE 3.0 ( 1, 2) 3. Windows CE 3.0 Internet Explorer 4. Outlook Windows CE 3.0 5. Windows CE 3.0 1: CASSIOPEIA 2: jornada 5
3.1 JS.Internal.f JS.Internal.f ( PC ) Internet Explorer 25% HTML "JS.Internal.f.htm" Internet Explorer 3.1.1 Pocket PC ----------------------------------------------------------------------------------------------------------- ActiveSync PC Pocket PC Internet Explorer 3 HTML HTML JS.Internal.f WScript.Shell Scripting.FileSystemObject WSH(Windows Script Host) ActiveX PC Windows CE ActiveX Pocket PC PC 3: Pocket PC JS.Internal.f Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer 4 HTML JS.Internal.f Handheld PC Pocket PC PC ActiveX ActiveX Handheld PC 6
PC 4: Handheld PC JS.Internal.f 3.1.2 Pocket PC ----------------------------------------------------------------------------------------------------------- Pocket PC ( 5) ( 6) 1 Internet Explorer 3 JS.Internal.f 5: Pocket PC 6: Pocket PC JS.Internal.f 1 ActiveSync 7
Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC ( 7) ( 8) 2 Internet Explorer 4 JS.Internal.f 7: Handheld PC 8: Handheld PC JS.Internal.f 2 ActiveSync Pocket PC 8
3.2 JS.Lame JS.Lame PC Internet Explorer Windows Web, Help, Web Wallpaper HTML JS "JS.Lame.htm" Internet Explorer 3.2.1 Pocket PC ----------------------------------------------------------------------------------------------------------- ActiveSync PC Pocket PC Internet Explorer 9 HTML Internet Explorer HTML JS.Lame Scripting.FileSystemObject Windows CE PC 9: Pocket PC JS.Lame Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer 10 HTML / JS JS.Lame Handheld PC ActiveX PC 9
10: Handheld PC JS.Lame 3.2.2 Pocket PC ----------------------------------------------------------------------------------------------------------- Pocket PC Internet Explorer JS.Lame Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer JS.Lame 10
3.3 JS.NastyKiller JS.NastyKiller PC Internet Explorer Windows System.ini, Win.ini, Rundll32.exe, Rundll.exe, Command.com, Regedit.exe, Regsvr32.exe Command.com "JS.NastyKiller.htm" Internet Explorer 3.3.1 Pocket PC ----------------------------------------------------------------------------------------------------------- ActiveSync PC Pocket PC Internet Explorer 11 JavaScript JS.NastyKiller Scriptlet.TypeLib Windows CE PC 11: Pocket PC JS.NastyKiller Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer 12 JS.NastyKiller Handheld PC PC 11
12: Handheld PC JS.NastyKiller 3.3.2 Pocket PC ----------------------------------------------------------------------------------------------------------- Pocket PC Internet Explorer JS.NastyKiller Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer JS.NastyKiller 12
3.4 JS.Trojan.Freq.c JS.Trojan.Freq.c PC Internet Explorer FTP Trojan.exe Startme.hta Windows Windows Programme Autostart 3 "JS.Trojan.Freq.c.htm" Internet Explorer 3.4.1 Pocket PC ----------------------------------------------------------------------------------------------------------- ActiveSync PC Pocket PC Internet Explorer 13 HTML Startme.hta JS.Trojan.Freq.c Scriptlet.TypeLib Windows CE Startme.hta PC 13: Pocket PC JS.Trojan.Freq.c 3 Windows 13
Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer 14 Startme.hta JS.Trojan.Freq.c Startme.hta PC 14: Handheld PC JS.Trojan.Freq.c 3.4.2 Pocket PC ----------------------------------------------------------------------------------------------------------- Pocket PC Internet Explorer JS.Trojan.Freq.c Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer JS.Trojan.Freq.c 14
3.5 JS.Wobble JS.Wobble PC JScript / VBScript WSC XML XML Outlook WSC XML "JS.Wobble.xml" Internet Explorer 3.5.1 Pocket PC ----------------------------------------------------------------------------------------------------------- ActiveSync PC Pocket PC Internet Explorer 15 1 "XML" 16 XML Outlook JS.Wobble Windows CE Internet Explorer XML 1 2 VBScript Scripting.FileSystemObject WScript.Network Outlook.Application WScript.Shell WSC JScript / VBScript (JSE / VBE ) JS / VBS (3.6 ) PC 15: Pocket PC JS.Wobble( ) 15
16: Pocket PC JS.Wobble Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer ( 17) 1 "XML" 18 XML JS.Wobble Handheld PC Internet Explorer XML VBScript Scripting.FileSystemObject WScript.Network Outlook.Application WScript.Shell WSC JSE / VBE / JS / VBS PC 17: Handheld PC JS.Wobble( ) 16
18: Handheld PC JS.Wobble 3.5.2 Pocket PC ----------------------------------------------------------------------------------------------------------- Pocket PC Internet Explorer JS.Wobble WSC JSE / VBE / JS / VBS Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC Internet Explorer JS.Wobble WSC JSE / VBE / JS / VBS 17
3.6 Jscript.Optiz Jscript.Optiz HTML JScript PC Windows 4 JS "Jscript.Optiz.js" 3.6.1 Pocket PC ----------------------------------------------------------------------------------------------------------- ActiveSync PC Pocket PC 19 JS Jscript.Optiz PC WSH Windows CE WSH JS VBS / JSE / VBE / WSC PC 19: Pocket PC Jscript.Optiz Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC 20 Jscript.Optiz 4 Windows Desktop Windows 18
Handheld PC WSH JS VBS / JSE / VBE / WSC PC 20: Handheld PC Jscript.Optiz 3.6.2 Pocket PC ----------------------------------------------------------------------------------------------------------- Pocket PC ( 21) Jscript.Optiz JS / VBS / JSE / VBE / WSC 21: Pocket PC Jscript.Optiz 19
Handheld PC ------------------------------------------------------------------------------------------------------- Handheld PC ( 22) Jscript.Optiz JS / VBS / JSE / VBE / WSC 22: Handheld PC Jscript.Optiz 20
4 Windows CE 3.0 21
4.1 Internet Explorer Pocket PC Pocket Internet Explorer Handheld PC 2000 Internet Explorer for Handheld PC HTML <SCRIPT> JavaScript 1.1 JScript PC VBScript ActiveX Windows CE Internet Explorer Internet Explorer ActiveX Windows CE Windows CE PC ActiveX Windows CE ROM RAM ActiveX PC 22
4.2 Pocket Outlook Windows CE Pocket Outlook PC Outlook Windows CE Windows CE PC Outlook Windows CE Windows CE PC Windows CE 23
4.3 WSH WSH(Windows Script Host) PC JScript VBScript PC Internet Explorer HTML ActiveX Windows CE WSH WSH Windows CE PC WSH Internet Explorer Microsoft Office Windows CE WSH WSH 24
5 Windows CE Internet Explorer Windows CE Windows 98 / Me JavaScript JScript Windows CE 3.0 (Pocket PC Handheld PC 2000 ) (JS.Internal.f JS.Lame JS.NastyKiller JS.Trojan.Freq.c JS.Wobble Jscript.Optiz) Pocket PC Pocket Internet Explorer Pocket PC Handheld PC 2000 Internet Explorer for Handheld PC Handheld PC 2000 1) 2) Windows CE PC WSH Windows 98 / Me Windows CE 25