[FSC] Samsung Wave Autorun.inf

http://www.f-secure.com/weblog/archi...msung_wave.jpgMore and more mobile phones are shipping with Windows installation files on microSD cards rather than on CD-ROMs. All that's needed to sync your phone with your PC is to connect the phone, detect it as a removable USB drive, and then run the installer. Many phone vendors also include an autorun.inf file to assist the process.

Unfortunately, autorun.inf files can be infected during the production process, and microSD cards aren't read-only.

Engadget is reporting that at least some German models of Samsung's Wave, a Linux based "iPhone killer", are shipping with an infected autorun.inf and a file called slmvsrv.exe.

The file's MD5 is bb9818d76fe60e68608e2a1e7bc6666b and we detect it as Trojan.Generic.3932466. We have telemetry indicating this is in the wild (but quite limited).

This is yet another example of infected devices which will spread to your computer. On 02/06/10 At 01:50 PM

**Hidden Content: To see this hidden content your post count must be 1 or greater.**