New virus from China, collects passwords, has potential to collect personal data.
Virus name is "mocmex" per Computer Associates.
http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/02/15/BU47V0VOH.DTL
Deborah Gage, Chronicle Staff Writer
Friday, February 15, 2008
It spreads by hiding itself on photo frames and any other portable storage device* that happens to be plugged into an infected PC.
...Computer Associates (says the virus renders ineffective) more than 100 security vendors (and)...security and firewall built into Microsoft Windows. It downloads files from remote locations and hides files, which it names randomly, on any PC it infects, making itself very difficult to remove.
According to CA, it will re-enable Windows' "auto-run" feature even if it was previously disabled by the user. They further state you're infected the moment you plug an infected device into your computer.
Note: a file/activity monitoring program such as Filemon/Regmon or similar may help you determine if something unusual is happening when you plug in an external device.
More info also at:
http://www.slashgear.com/china-made-photo-frame-with-hidden-viruses-sold-at-major-retailers-1510296.php
*USB/thumb drives, digital cameras, mp3 players, digital voice recorders, PDAs, etc
|
232 years 
RSS Updates