Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsElectronicsBasicsRepairDesignCADComponentsEquipmentElectrical Engineering
ElectronicsKB.com
Contact UsLink To UsSearch & Site Map

Electronics Forum / Electronics / March 2010



Tip: Looking for answers? Try searching our database.

Energizer USB Duo battery charger hides a Trojan

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Don McKenzie - 10 Mar 2010 22:46 GMT
Energizer USB Duo battery charger hides a Trojan
March 9, 2010 by Lin Edwards

(PhysOrg.com) -- The Energizer Duo USB battery charger has been hiding a
backdoor Trojan in its software that affects computers using Windows.
According to Symantec the Trojan has probably been there since 10th May
2007.

Energizer has now taken the software for the model CHUSB charger off the
market and removed the site from which it could be downloaded, and the
company is asking customers who downloaded the Windows version to
uninstall it. There are easy steps to fight the Trojan in affected
machines, and Macintosh users are not affected.

http://www.physorg.com/news187335556.html

Cheers Don...

Signature

Don McKenzie

Site Map:            http://www.dontronics.com/sitemap
E-Mail Contact Page: http://www.dontronics.com/email
Web Camera Page:     http://www.dontronics.com/webcam
No More Damn Spam:   http://www.dontronics.com/spam

Product Sellout: 15% OFF 4DSystems OLED Displays & modules.
http://www.dontronics-shop.com/micro-oled.html

D Yuniskis - 10 Mar 2010 22:50 GMT
> Energizer USB Duo battery charger hides a Trojan
> March 9, 2010 by Lin Edwards
[quoted text clipped - 11 lines]
>
> http://www.physorg.com/news187335556.html

And *none* of the users who own this device have *ever* run
a virus scanner??
Don McKenzie - 10 Mar 2010 22:57 GMT
>> Energizer USB Duo battery charger hides a Trojan
>> March 9, 2010 by Lin Edwards
[quoted text clipped - 14 lines]
> And *none* of the users who own this device have *ever* run
> a virus scanner??

Makes you wonder, if Symantec said the Trojan has probably been there
since 10th May 2007, then why one of those customers that run virus
scanners, didn't report it to Energizer when they found it.

And if they did, why something wasn't done about it in 2007.

I saw them on the shelf recently and thought, I must get one of those.
Much better than carrying an ac charger around with my netbook gear.

Cheers Don...

Signature

Don McKenzie

Site Map:            http://www.dontronics.com/sitemap
E-Mail Contact Page: http://www.dontronics.com/email
Web Camera Page:     http://www.dontronics.com/webcam
No More Damn Spam:   http://www.dontronics.com/spam

Product Sellout: 15% OFF 4DSystems OLED Displays & modules.
http://www.dontronics-shop.com/micro-oled.html

Jon - 10 Mar 2010 23:08 GMT
>>> Energizer USB Duo battery charger hides a Trojan
>>> March 9, 2010 by Lin Edwards
[quoted text clipped - 25 lines]
>
> Cheers Don...

Energizer hasn't said it but I'm reasonably sure we can thank China.

--- news://freenews.netfront.net/ - complaints: news@netfront.net ---
AZ Nomad - 10 Mar 2010 23:17 GMT
>>> Energizer USB Duo battery charger hides a Trojan
>>> March 9, 2010 by Lin Edwards
[quoted text clipped - 14 lines]
>> And *none* of the users who own this device have *ever* run
>> a virus scanner??

>Makes you wonder, if Symantec said the Trojan has probably been there
>since 10th May 2007, then why one of those customers that run virus
>scanners, didn't report it to Energizer when they found it.

>And if they did, why something wasn't done about it in 2007.

>I saw them on the shelf recently and thought, I must get one of those.
>Much better than carrying an ac charger around with my netbook gear.

Yeah.  I was just thinking the other day:  what can I do in addition
to what I'm doing now to burn out those 500ma usb ports.  Maybe I can
look around for a USB toaster oven.  Until I find one of those, the
energizer battery charger is perfect!
Mickel - 11 Mar 2010 00:18 GMT
> And *none* of the users who own this device have *ever* run
> a virus scanner??

*Surely* this trojan didn't actually do anything. If it started calling out
on port 7777 someone would have noticed.
D Yuniskis - 11 Mar 2010 01:13 GMT
>> And *none* of the users who own this device have *ever* run
>> a virus scanner??
>
> *Surely* this trojan didn't actually do anything. If it started calling out
> on port 7777 someone would have noticed.

How do you know it calls *out* and doesn't just open 7777 and
*wait* for an incoming connection?

Regardless, a virus scan would/should have noticed the payload.
Mickel - 11 Mar 2010 02:55 GMT
> How do you know it calls *out* and doesn't just open 7777 and
> *wait* for an incoming connection?

Possibly but considering even basic home routers have nat these days it
wouldn't be very effective. So pretty much it would do nothing.

> Regardless, a virus scan would/should have noticed the payload.

Why? Unless it is a know virus it's unlikely to get picked up.
D Yuniskis - 11 Mar 2010 18:49 GMT
>> How do you know it calls *out* and doesn't just open 7777 and
>> *wait* for an incoming connection?
[quoted text clipped - 5 lines]
>
> Why? Unless it is a know virus it's unlikely to get picked up.

In two years it remained hidden?
No one ever ran TCPview?
Jim Stewart - 11 Mar 2010 19:14 GMT
>>> How do you know it calls *out* and doesn't just open 7777 and
>>> *wait* for an incoming connection?
[quoted text clipped - 8 lines]
> In two years it remained hidden?
> No one ever ran TCPview?

No, but I ran Topview once...
keithr - 11 Mar 2010 19:45 GMT
>>>> How do you know it calls *out* and doesn't just open 7777 and
>>>> *wait* for an incoming connection?
[quoted text clipped - 10 lines]
>
> No, but I ran Topview once...

Jeeze you're old :)

Most people did only run it once.
Przemek Klosowski - 11 Mar 2010 03:52 GMT
>> Energizer USB Duo battery charger hides a Trojan March 9, 2010 by Lin

> And *none* of the users who own this device have *ever* run a virus
> scanner??

A virus scanner only detects the viruses that match a known signature, or
which do something that it knows about. If the malware is stealthy enough
it won't be detected.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2010 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.