View Single Post
  #10 (permalink)  
Old April 16th, 2008, 08:21 PM
Craig
Guest
 
Posts: n/a
Default Worm in phone tools?

Dave T. wrote:
> TeddyBare wrote:
>>
>>
>> "Dave T." <davey@MyPlace.net> wrote in message
>> news:16fMj.1327$7Z2.1181@newssvr12.news.prodigy.ne t...
>>> I just bought phone tools v. 5.0 to use with my Razr v3, and prior to
>>> installation I scanned the disk and found that a worm named
>>> "worm.win32.autorun.k" was on the disk. Obviously, I didn't install
>>> the program. Kaspersky calls this a "High Risk" item.
>>>
>>> Anyone know how or why this would be there, or is this a false-positive?
>>> --
>>> Dave T.
>>>
>>>
>>> "Your attitude serves as a lens through which you see life, and it's
>>> best when that lens is focused on the positive possibilities." -
>>> Ralph Marston

>>
>>
>> The Best Buy in Ogden, UT has been notified and they are looking into it.
>>
>> Have you contacted the store you bought it from about it as they will
>> want to know so they can take action.

>
> Not certain at this point what to do. I get absolutely no response from
> Motorola, but they are famous for that.
>
> I scanned the file at Virusscan.jotti and virustotal, and only one or
> two engines threw up a flag on each of them, and they all warned of a
> different piece of malware. I am beginning to feel that it is a
> false-positive, but paranoia has me in it's grip. d8(>
>
> What I find REALLY odd is that on the Motorola forum no one has ever
> heard of Version 5.
>


Dave;

I took a look at my MPT (version 4.5.6a August 07) and found a file
named MPT_TEST_info.exe (marked as version 3.1.1.0). I submitted it to
jotti and it came back clean, no malware alerts whatsoever. The md5
hash on the file is: c9345168269bf47b722a92f22f321beb.

Interestingly, MPT_TEST_info is compiled by AutoIt
<http://www.autoitscript.com/autoit3/compiled.html>. The author of
autoit talks about getting false positives pretty regularly. He's
asked that anyone who gets a false positive to follow up w/the developer
and to feel free to drop him a line as well...
<http://www.autoitscript.com/autoit3/compiled.html> (the contact linky
is busted but here's one that works:
<http://www.autoitscript.com/email_us.shtml>

Fwiw, I've used bvrp's MPT for a few years now and find the quality &
flexibility of the s/w to be seriously lacking. I don't use Outlook nor
Lotus Notes so the whole experience has been... kludgy. The support's
been ok for me but it just adds to this feeling that my data is being
managed by a black box. Because of my experience w/MPT, my next choice
of phones will depend on an open source project being available to
support it. Either that or, at the very least the "semi-open" S60 OS.

g'luck & please keep us up-to-date

-Craig

Reply With Quote