funsec mailing list archives
Re: Trojan Found In New HDs Sold In Taiwan
From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Wed, 14 Nov 2007 14:00:37 -0500
On 11/13/07, Juha-Matti Laurio <juha-matti.laurio () netti fi> wrote:
The description of this malware (Kaspersky's writeup): Virus.Win32.AutoRun.ah http://www.viruslist.com/en/viruses/encyclopedia?virusid=160221 The payload is not so bad in corporate environment...
The virus modifies values of the following system registry keys: [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr = 1 [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions = 1 It also searches the hard disk partitions <snip> for files with an ".mp3" extension: <snip> These files wil then be deleted. OP referenced this description:
Trojan horse viruses that automatically upload to Beijing Web sites anything the computer user saves on the hard disc,
Which one is it? If it is the latter, then has anyone considered the fact that this might just be a free online backup service from Seagate :-P -JP _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Trojan Found In New HDs Sold In Taiwan Paul Ferguson (Nov 11)
- Re: Trojan Found In New HDs Sold In Taiwan Gadi Evron (Nov 11)
- RE: Trojan Found In New HDs Sold In Taiwan Larry Seltzer (Nov 12)
- RE: Trojan Found In New HDs Sold In Taiwan Nick FitzGerald (Nov 12)
- Re: Trojan Found In New HDs Sold In Taiwan der Mouse (Nov 12)
- <Possible follow-ups>
- Re: Trojan Found In New HDs Sold In Taiwan Juha-Matti Laurio (Nov 13)
- Re: Trojan Found In New HDs Sold In Taiwan Dude VanWinkle (Nov 14)
- Re: Trojan Found In New HDs Sold In Taiwan Juha-Matti Laurio (Nov 14)
- Re: Trojan Found In New HDs Sold In Taiwan Dude VanWinkle (Nov 15)
- Re: Trojan Found In New HDs Sold In Taiwan Juha-Matti Laurio (Nov 14)
- RE: Trojan Found In New HDs Sold In Taiwan David Harley (Nov 14)
- Re: Trojan Found In New HDs Sold In Taiwan Juha-Matti Laurio (Nov 15)
- Re: Trojan Found In New HDs Sold In Taiwan Juha-Matti Laurio (Nov 17)