Jump to content

Virus found on external Maxtor drives.


cooper

Recommended Posts

Source - dutch

Date: 19 september 2007.

A virus has been found on the Maxtor 3200 Personal Storage range of drives sold in dutch stored. It's unclear wether the malicious code can be found on Maxtor drives sold abroad.

The virus was found by Kaspersky Lab Benelux on multiple brand new harddisks with varying storage capacities, accquired last monday. After attaching the drives the antivirus software immediately fired off an alert, so users who are running an up-to-date version of their antivirus software aren't seriously at risk.

The virus is written in Delphi, and seeks out accounts and associated passwords for online games. The dtd (digitally transferrable disease) tries to install itself using an autorun.inf file in the root of the external drive.

It's likely that the factory infected a whole batch of Maxtor 3200's. The trade in stolen accounts foronline games such as World Of Warcraft is a lucrative one. Particularly in Asia the sale of such data is abundant. Kasperky Lab says the found virus has been known for only a few months, and thus is more dangerous that the 13 year old virus found last week on new Medion notebooks.

Link to comment
Share on other sites

Source - dutch

Date: 19 september 2007.

A virus has been found on the Maxtor 3200 Personal Storage range of drives sold in dutch stored. It's unclear wether the malicious code can be found on Maxtor drives sold abroad.

The virus was found by Kaspersky Lab Benelux on multiple brand new harddisks with varying storage capacities, accquired last monday. After attaching the drives the antivirus software immediately fired off an alert, so users who are running an up-to-date version of their antivirus software aren't seriously at risk.

The virus is written in Delphi, and seeks out accounts and associated passwords for online games. The dtd (digitally transferrable disease) tries to install itself using an autorun.inf file in the root of the external drive.

It's likely that the factory infected a whole batch of Maxtor 3200's. The trade in stolen accounts foronline games such as World Of Warcraft is a lucrative one. Particularly in Asia the sale of such data is abundant. Kasperky Lab says the found virus has been known for only a few months, and thus is more dangerous that the 13 year old virus found last week on new Medion notebooks.

boy I'm glad no OSes out there will autorun code from a new device that would be a huge security risk...

in other news I started formating all new drives from live CDs

Link to comment
Share on other sites

  • 4 weeks later...

U3 is an auto ran program from an external device and optical disks auto run too. All within winXP of course. All it would really take for windows boxes was an auto running batch script or an auto run command linking to a piece of software on the HDD. Most likely though the AV would find these.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...