Energizer USB Duo battery charger hides a Trojan

Mar 10, 2010 11 Replies

Energizer USB Duo battery charger hides a Trojan March 9, 2010 by Lin Edwards



(PhysOrg.com) -- The Energizer Duo USB battery charger has been hiding a backdoor Trojan in its software that affects computers using Windows. According to Symantec the Trojan has probably been there since 10th May



2007.

Energizer has now taken the software for the model CHUSB charger off the market and removed the site from which it could be downloaded, and the company is asking customers who downloaded the Windows version to uninstall it. There are easy steps to fight the Trojan in affected machines, and Macintosh users are not affected.



formatting link



Cheers Don...



Don McKenzie Site Map: http://www.dontronics.com/sitemap E-Mail Contact Page: http://www.dontronics.com/email Web Camera Page: http://www.dontronics.com/webcam No More Damn Spam: http://www.dontronics.com/spam Product Sellout: 15% OFF 4DSystems OLED Displays & modules. http://www.dontronics-shop.com/micro-oled.html

Makes you wonder, if Symantec said the Trojan has probably been there since 10th May 2007, then why one of those customers that run virus scanners, didn't report it to Energizer when they found it.

And if they did, why something wasn't done about it in 2007.

I saw them on the shelf recently and thought, I must get one of those. Much better than carrying an ac charger around with my netbook gear.

Cheers Don...

Don McKenzie Site Map: http://www.dontronics.com/sitemap E-Mail Contact Page: http://www.dontronics.com/email Web Camera Page: http://www.dontronics.com/webcam No More Damn Spam: http://www.dontronics.com/spam Product Sellout: 15% OFF 4DSystems OLED Displays & modules. http://www.dontronics-shop.com/micro-oled.html

And *none* of the users who own this device have *ever* run a virus scanner??

Energizer hasn't said it but I'm reasonably sure we can thank China.

--- news://freenews.netfront.net/ - complaints: snipped-for-privacy@netfront.net ---

Yeah. I was just thinking the other day: what can I do in addition to what I'm doing now to burn out those 500ma usb ports. Maybe I can look around for a USB toaster oven. Until I find one of those, the energizer battery charger is perfect!

*Surely* this trojan didn't actually do anything. If it started calling out on port 7777 someone would have noticed.

How do you know it calls *out* and doesn't just open 7777 and

*wait* for an incoming connection?

Regardless, a virus scan would/should have noticed the payload.

Possibly but considering even basic home routers have nat these days it wouldn't be very effective. So pretty much it would do nothing.

Why? Unless it is a know virus it's unlikely to get picked up.

A virus scanner only detects the viruses that match a known signature, or which do something that it knows about. If the malware is stealthy enough it won't be detected.

In two years it remained hidden? No one ever ran TCPview?

No, but I ran Topview once...

Jeeze you're old :)

Most people did only run it once.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required