Harry Potter and the USB Device of Doom
While analysing a trivial sample written using AutoIt, we received the following bad news.
Oh no!
But don’t worry, he is still alive, living happily along with other users on your computer….
However, we have a slight doubt that this is written by J.K. Rowling herself as the user is greeted with the following message at every login:
In addition, everytime I open Internet Explorer, my start page is redirected to a page of this book….
This is part of the “story” told by W32/Hairy-A. W32/Hairy-A attempts to spread this newest chapter of Harry Potter to the world via dropping a copy of itself into various removable drives.
Hairier than Hagrid’s beard!
Posted on June 28th, 2007 by Boris Lau, SophosLabs, UKFiled under: Malware
Windows 7 security - A great leap forward or business as usual?
