Symantec: Energizer Battery Recharger Ships with Trojan

[Snaquebite]

http://www.pcmag.com/article2/0,2817,2361042,00.asp

03.08.10


by Larry Seltzer

Symantec has found that Energizer is distributing a backdoor Trojan as part of a USB charger-monitoring software package.

The software, which must be downloaded and is not distributed with the actual charger, creates a bot remotely-controllable over port 7777. The malicious file "Arucer.dll" is created and added to the registry run key and is now detected by Symantec as Trojan.Arugizer.

The bot accepts a variety of commands, explained in detail in the Symantec analysis. It can make modifications to the registry and upload requested files to the botmaster. CERT has also issued an advisory on this threat.

While the file is specific to the charger, it operates whether the charger is attached or not. When the charger is attached, it displays a graphic showing the progress of the charge.

Originally posted to the PCMag.com security blog, Security Watch.

US CERT Alert Here:
http://www.kb.cert.org/vuls/id/154421

[PSM]

Oh! I thought it was a special "bundle".

Never mind.

Pat