Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

IBM unleashes virus on AusCERT delegates
itnews.com.au ^ | May 21, 2010 | Nate Cochrane

Posted on 05/21/2010 8:14:34 PM PDT by smokingfrog

Malware-infected USB key the culprit.

Delegates to AusCERT, Australia's premier information security event held this week on the Gold Coast, have taken home a little of the stuff they spent the week agonising over - a virus.

In an email this afternoon, IBM advised visitors to its AusCERT booth that its complimentary USB key was infected with a virus. An IBM spokesman and conference organisers confirmed the email was genuine.

It is the second time in two years that clumsy exhibitors have infected their customers with viruses.

"At the AusCERT conference this week, you may have collected a complimentary USB key from the IBM booth," IBM Australia chief technologist Glenn Wightwick wrote in an email to delegates this afternoon.

"Unfortunately we have discovered that some of these USB keys contained malware and we suspect that all USB keys may be affected."

Wightwick said the malware, which dated to 2008, was detected by most anti-virus products.

"The malware is known by a number of names and is contained in the setup.exe and autorun.ini files.

"It is spread when the infected USB device is inserted into a Microsoft Windows workstation or server whereby the setup.exe and autorun.ini files run automatically.

"Please do not use the USB key, and we ask that you return it to IBM."

IBM said in a statement that a "small number of IBM-branded USB sticks distributed to delegates at the recent AusCERT2010 conference were found to contain malware".

"IBM has immediately contacted delegates with remedial advice, and regrets any inconvenience that may have been caused," an IBM spokesman said.

(Excerpt) Read more at itnews.com.au ...


TOPICS: Australia/New Zealand; News/Current Events; Technical
KEYWORDS: exploit; oops; virus

1 posted on 05/21/2010 8:14:34 PM PDT by smokingfrog
[ Post Reply | Private Reply | View Replies]

To: smokingfrog

Portable drive worm? Very nasty.


2 posted on 05/21/2010 8:17:38 PM PDT by chris37
[ Post Reply | Private Reply | To 1 | View Replies]

To: chris37

Probably intentional by some employee.


3 posted on 05/21/2010 8:20:10 PM PDT by driftdiver (I could eat it raw, but why do that when I have a fire.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: chris37

Funny my wife brought one home from a show yesterday. I knew enough to check it for junk first.


4 posted on 05/21/2010 8:21:53 PM PDT by UB355 (Slower traffic keep right)
[ Post Reply | Private Reply | To 2 | View Replies]

To: smokingfrog

Quite a few years ago I was doing some computer work for a very large financial institution.

The testing lab of the financial company had created a new machine image which contained all the software needed to run company workstations. The testing lab signed off on the image and sent it to their contractor so it could be pushed out to company workstations.

The contractor, for whatever reason, added a piece of software that hadn’t been tested, then pushed the image out to a third of the machines the company had. At least 1,000 computers. Every single computer blew up.

The contractor had added an anti-virus program to an image that already had a virus package. McAfee and Norton don’t play well together on the same computer.

The contractor: IBM


5 posted on 05/21/2010 8:25:35 PM PDT by stylin_geek (Greed and envy is used by our political class to exploit the rich and poor.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: driftdiver
Probably intentional by some employee.

Probably outsourced the sticks to China. This crap happens all the time with turd world electronics.

/johnny

6 posted on 05/21/2010 8:30:29 PM PDT by JRandomFreeper (Gone Galt)
[ Post Reply | Private Reply | To 3 | View Replies]

To: smokingfrog
Panda USB Autorun vaccine:

http://research.pandasecurity.com/panda-usb-and-autorun-vaccine/

7 posted on 05/21/2010 8:31:28 PM PDT by TChad
[ Post Reply | Private Reply | To 1 | View Replies]

To: smokingfrog

These are what we call “experts”


8 posted on 05/21/2010 8:46:21 PM PDT by GeronL (Political Correctness Kills)
[ Post Reply | Private Reply | To 1 | View Replies]

To: smokingfrog
Well, at least if you are running Win 7 you do not have to worry about this type of thing. It is not possible to get a USB memory stick to Autorun in Win 7 it has been disabled. I tried to bypass it that restriction everyway i could think of along with 5 other programmers and could not get around it. Now if the system is already infected who knows.
9 posted on 05/21/2010 10:43:53 PM PDT by SledgeCS (The Zoo has an African lion, and the White House has a Lying African...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: smokingfrog
...It is spread when the infected USB device is inserted into a Microsoft Windows workstation...

Somebody should point out, I guess, that Macs are essentially immune from this and virtually all other malware.

10 posted on 05/22/2010 5:57:48 AM PDT by doc11355
[ Post Reply | Private Reply | To 1 | View Replies]

To: SledgeCS
It is not possible to get a USB memory stick to Autorun in Win 7 it has been disabled.

You can disable it in Windows XP, as well -- but you have to use the TweakUI Power Toy from Microsoft:

http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx

It was a stupid feature, anyway. I'm glad they finally saw the light for Windows 7 -- but wonder why they haven't fixed Windows XP.

11 posted on 05/25/2010 4:56:55 AM PDT by justlurking (The only remedy for a bad guy with a gun is a good WOMAN (Sgt. Kimberly Munley) with a gun)
[ Post Reply | Private Reply | To 9 | View Replies]

To: justlurking

Hey! Yet another reason to run Linux!


12 posted on 05/25/2010 5:15:04 AM PDT by sean_og (--... ...--)
[ Post Reply | Private Reply | To 11 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson