FYI…

- http://www.us-cert.gov/current/#microsoft_wince_trojan
February 26, 2008 - "US-CERT is aware of reports of a trojan that affects Microsoft Windows CE. This trojan disables Windows Mobile application installation security.
The trojan may take any or all of the following actions on the mobile device:
* spreads via seemingly legitimate application installation files
* installs as an autorun program on the memory card
* installs itself to the device when an infected memory card is inserted
* protects itself from deletion by copying itself back to disk
* replaces the browser's homepage
* allows unsigned applications to install without warning…"

(This is an old trojan and should be covered by most AV's… why now?)

'Must be new variant of (i.e.: per AVG name) "Worm/Autoit"
…new variant detection added today:
> http://www.grisoft.com/doc/News/lng/us/tpl/tpl01
February 26, 2008 - AVI 269.21.1/ 1299

:ph34r: