Archive for May, 2008

Swedish home electronics chain “TeknikMagasinet” sells trojan infected USB memory sticks

According to the Swedish IDG news-service, Swedish home electronic chain “TeknikMagasinet” is selling USB memory sticks (ZAP Slider USB 8G) that are/were infected with a trojan.

An angry reader of IDG’s daily IT-newspaper “Computer Sweden” contacted them and shared his story. The reader had bought 3 usb memory sticks and all of them were in unbroken casings. All 3 usb memory sticks had 60 Megabyte used and when plugged into a Microsoft Windows Vista computer, the anti virus application reacted and warned against a trojan being present on the memory stick. Also Microsoft Windows XP were used as a test-subject and the anti virus application reacted on this platform as well.

The reader claimed to have contacted TeknikMagasinet, asking for an explanation, however there was no alleged return-contact by anyone over at the home electronics chain.

Christian Ekstrand at TeknikMagasinet says that only a small number in a particular batch of usb memory sticks that TeknikMagasinet manufacture themselves in Taiwan were infected and that “only 50 usb memory sticks were infected” (as far as he knows). Mr Ekstrand says that he can however not speak about how many , if any, of the customers of TeknikMagasinet that bought the particular products were affected by the incident. He also says that this is the first incident over the last 4-5 years that TeknikMagasinet has co-operated with the particular plant in Taiwan. Also, he said that the reason to why the Computer Sweden reader didn’t hear from TeknikMagasinet was that they weren’t able to reach him and that they in no way or form is trying to tone down the incident.

Mr Ekstrand continues to say that “the virus is pretty harmless and for example only tries to steal World of Warcraft login information” and that “the customer should not be at risk if they have an anti virus program installed” (translating / paraphrasing).

A personal reflection here is that I don’t know if I agree that calling a keylogger that tries to steal information and installs itself automatically as something minor. Who knows what other information the keylogger can harvest if deployed in a customer’s computer. Would it still be a “minor issue” if the customer ends up losing financial information such as his/her credit card number?

UPDATE: Christian Ekstrand comments in the article’s comment section that the virus came in through a control computer that was used by an employee of the plant to surf privately. Private surfing is prohibited at the plant, Christian says. Check this link for information about the trojan.

The mystery of electricity – or “when wall-sockets attack”

The other night the power went off at my parent’s house, which I was in for the night. This didn’t turn out to be the vanilla power outage where your electricity flickers off and on again, no this one created poltergeist-like effects.

So, the short story is that the power went out 4 in the morning, nothing odd with that – it happens. Then one hour later, at 5 o’clock the power flickers on and then goes off again. A couple of minutes later the power comes on again, but something doesn’t seem right. I check the lights, and they are shining presumably weaker. I try to go online, as my dsl-modem with attached Linksys access point should have automagically went online – no go. I check the dsl-modem and it looks to be dead. (I swear silently for myself, thinking that I have to get a new modem = more hazzle.)

Seconds later I hear a loud humming noise coming out from the speakers next to the office area. Hmm, I start to think to myself (beside hearing sounds “from the other side”) that something must be messed up with the quality of electricity coming in to the house, and I quickly pull out all electronics, fridges and other appliances that might be in danger. (One of the freezers was standing and clicking on it’s own, and I was actually expecting Pinhead and his cenobites to enter at any moment.)

Next step was to see what actually is coming out of the sockets in the wall, and what do you know?! The voltage is ~110V instead of the regular ~230V as is standard.

During me lounging around, my dad wakes up (the most alert 70 year old you’ll see – ever) and we start to check the fuses inside the house – where-as all are functioning. In order to find the fault source, we go outside to the main fuse box to and both check the fuses there – all are alright.

The natural next step is to see what kind of voltage there are on the phases. *woopsie* Only 1 phase out of 3 are working and the one that is working shows half of what it should, yes you guessed right; 110V.

As we have gone through all the steps at the local facilities, we then call the energy company, where a perky young lady answers (my not so perky) father in the other end that she will notify the electrician on call. (I was trying to hide my laughter hearing him grunting newly awake ;-) ) A couple of minutes later, the electrician calls up my father and they discuss the problem. Knowing the area, my father tells the workers what has been sources of error in the past and awaits their arrival.

When this is done, I go to sleep as I know that there is not much I can do by then. (The time is now around 6.30 in the morning.)

I wake up a couple of hours later, and find out that the error was quite a transient one. A “line fault”, for sure, but that was only a partial cable-break to a cable that was running under the creek close to my parents’ house. This partial error was transient in nature, to the degree that it didn’t go completely off and the broken cable served as a giant resistor. Thus, the low voltage levels and malfunctioning phases at the end-point of the consumer’s facility – aka, the border fuse box.

When awake, I put on the DSL-modem again; It worked just fine. It was just a cheap (OEM) ac-adapter that only handled ~230V. The Linksys access point worked like a charm however, as this ac-adapter could take both ~110V and ~230V.

Lesson to be learned from all of this; Never take electricity for granted – it is actually quite a complex process to manufacture and bring into your home. (Plus of course to watch out for Pinhead when opening the freezer :-) )

Until the next time… keep your fingers out of the sockets.

Categories