[Bismillah]

Hello recently my friend at school got a autorun virus on his memory stick which i later got on mine after getting rid of this virus using MBAM. My mum decides to plug in her phone to upload some pictures to facebook yet it turns out her phone was carrying a worm virus?
how is this possible since my mum only plugs her phone in to her computer and no one elses and she never got the virus from her computer? the virus is gone now but this is more of a how question.

[Advertisements]

I'm not able to help you address fixing or preventing this issue, but I can give you a little insight into how these infections are passed across media (USB sticks) and platforms (phone to computer).

Viruses may be written to only affect certain systems. When The Register took an in depth look a Rogue Antivirus program¹, they found that the program did not install on PCs that had a keyboard set up for Russian language packs. A virus designed for a phone operating system may be attached to a fake Facebook link or message, and like dormant on a computer once it tricks the user into downloading it or utilizes a security exploit to get on the computer.

Phones, USB sticks, and other peripherals generally have a setting that allows them to automatically run when the computer detects them. This usually happens when they get plugged in or the machine starts.

The good news is that you can inoculate USB sticks and set your computer to be safer buy not running things automatically. If you would like help, I'd recommend that you start here.

Here are a couple of great sources of computer security news:

http://www.theregister.co.uk/security/
http://www.cnet.com/...Column.0;subnav

1) http://www.theregist...tomy_of_a_hack/

[galtwish]

I'm not able to help you address fixing or preventing this issue, but I can give you a little insight into how these infections are passed across media (USB sticks) and platforms (phone to computer).

Viruses may be written to only affect certain systems. When The Register took an in depth look a Rogue Antivirus program¹, they found that the program did not install on PCs that had a keyboard set up for Russian language packs. A virus designed for a phone operating system may be attached to a fake Facebook link or message, and like dormant on a computer once it tricks the user into downloading it or utilizes a security exploit to get on the computer.

Phones, USB sticks, and other peripherals generally have a setting that allows them to automatically run when the computer detects them. This usually happens when they get plugged in or the machine starts.

The good news is that you can inoculate USB sticks and set your computer to be safer buy not running things automatically. If you would like help, I'd recommend that you start here.

Here are a couple of great sources of computer security news:

http://www.theregister.co.uk/security/
http://www.cnet.com/...Column.0;subnav

1) http://www.theregist...tomy_of_a_hack/

[nerissa22]

thanks for this information...

[mikeloeven]

alot of people dont actualy know this but unless you use active synch or itunes to access your phone. plugging in your phone will not access the data on the phone's internal memory or numbers stored on your sim card. but rather the computer bypasses the phone all together and mounts the small micro sd card inside the phone as if it was a usb thumbdrive.

so if the phone was in contact with the same computer that got the virus from the thumb drive the virus would not know it was a phone and simply copy itself to the micro sd card as if it were just another thumbdrive to be infected.

since a phone uses a RISK processor and completely propriatary os the autorun virus would not be noticed untill the phones microsd card was read by another computer with autorun enabled.

so basically make sure your phones dont come into contact with untrusted machines unless you specifically set the operating system to mark the card as read only first.



but from the sound of your story your mom probibally plugged the phone into the infected computer at some earlier point in time when the worm was active but hadent yet been set off. and got the autorun placed on the card.

you removed the virus

mom plugged the phone in again and the virus reinstalled it'sself

Edited by mikeloeven, 11 December 2010 - 08:43 PM.

[tazz123]

autorun virus is difficult to remove completely, may be your antivirus hvnt remove it completely.. and when your mom attach phone to pc it sticks again in phone memory, with autorun command..

[mikeloeven]

if you do disable autorun like the first reply suggested it will than be safe to plug in every usb and flash memory device you have and run a general virus scan. it is aggrivating to do but if you dont check all your sticks and drives you may one day go "oh hey i forgot i had this" *plugs in drive* horray another virus attack.

but yeah with a self propagating worm like you have that writes itself to all available media not scanning everything in your house is like leaving a landmine somewhere lying around fully armed.

Edited by mikeloeven, 14 December 2010 - 09:51 AM.

[Asma Khan]

Hi guys i have few Questions :

when i try to Connect my Phone into PC , NOD 32 starts to show that there is Virus or Trojan , when i Scan for my Self its ok , it happens every time i Plug in USB Cable into PC .


1. how can i get rid of those Viruses & make My LG Kp500 Sucre or Cleaned ?
2.can i format the memory of Phone to make it Clean ?
3.Does Virus Cause Slow down to OS of my Phone


Mod Edit: removed link spam.-ST

[todo]

Hi guys i have few Questions :

when i try to Connect my Phone into PC , NOD 32 starts to show that there is Virus or Trojan , when i Scan for my Self its ok , it happens every time i Plug in USB Cable into PC .


1. how can i get rid of those Viruses & make My LG Kp500 Sucre or Cleaned ?
2.can i format the memory of Phone to make it Clean ?
3.Does Virus Cause Slow down to OS of my Phone

try installing nod Trail Version on your mobile

[Dakeyras]

The URL's in the advertisement posted are fake(malicious), the below are the correct ones. Unfortunately such can occur with advertisements even on seemingly legitimate sites, no harm done though and I will contact FileHippo myself in due course..

ESET Mobile Security Home Edition

Total Defense Mobile Security

[ShoppingMonk]

oh thanks for the information