Virus on x50v

[hugotm]

Hi,

Yesterday I made a downgrade to Active Sync 3.8 in order to sync trought my wi-fi connection. After that, when I open File Explorer and try to access the folder "device", the internet Explorer opens with a page www.pdaclube.net.

I guess it's a virus. Does anybody knows the solution? I've tried a hard reset and even with that, it doesn't works.

Thanks,

Hugo

[Drifter]

It is HIGHLY unlikely that you have a virus. If you have and can prove it, you would probably get the prize for being one of the first.

I suspect you have a setting that is not correct.

I assume that you are refering to opening devise using file explorer on the PDA. If so at the top left, you can change the folder which the PDA opens on default.

[hugotm]

I don't think it's a problem of setting...

Using Resco Registry I've found this key:
Name: CrossPlatformNavigationURL
String: http://www.pdaclube.net/

I've tried to exclude it, but the key comes back every time I go to File Explorer and choose "My device". And when I do this, the Internet Explorer keeps trying to open this page.

I have reinstalled the ROM (A05) and by the first time, everything was ok again, but after sync the problem appeared again. I think that my Active Sync is infected. So I will try to reinstall it.

Does anybody knows an anti-virus for this situation?

Thanks,

Hugo

[Mahstah]

When you synched for the first time after the hard reset, did you reinstall the software in the add/remove list on your desktop's ActiveSync? It sounds like a program you have loaded is causing the problem. Review your add/remove list in ActiveSync on your PC for questionable programs or post your list for users here to review. Did you scan your PC for viruses and spyware? I suggest using separate programs for each. You could also try updating to ActiveSync 4.1 or 4.2 beta.

To date there have been only a couple of viruses for Pocket PC. One of them was a proof of concept that made you confirm its install and told you it was a virus and the other one only targeted Pocket PC 2003 (backdoor.brador.a) and had an extremely low distribution. What you have sounds more like spyware than a virus, since it always links to an advertising site.

If I was you I'd contact pdaclube directly and ask WTF.

--Mahstah

[hugotm]

People,

I've reinstalled active sync, coming back to the 4.1 version, and it works.

Thanks for the help,

Hugo