Energizer battery charger contains backdoor for Remote Access

[xultar]

The United States Computer Emergency Response Team (US-CERT) has warned that the software included in the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access.

In an advisory, the US-CERT warned that he installer for the Energizer DUO software places the file UsbCharger.dll in the application’s directory and Arucer.dll in the Windows system32 directory.

When the Energizer UsbCharger software executes, it utilizes the UsbCharger.dll component for providing USB communication capabilities. UsbCharger.dll executes Arucer.dll via the Windows rundll32.exe mechanism, and it also configures Arucer.dll to execute automatically when Windows starts by creating an entry in the HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run registry key.

US-CERT said that Arucer.dll is a backdoor that allows unauthorized remote system access via accepting connections on 7777/tcp.

Here’s the major risk:

An attacker is able to remotely control a system, including the ability to list directories, send and receive files, and execute programs. The backdoor operates with the privileges of the logged-on user.


...http://blogs.zdnet.com/security/?p=5602&tag=wrapper;col1

WTF were they thinking? Instructions on how to remove the stuff and the rest of the story is @ the link.

[HeresyLives]

1. Baaaad bunny.

[MineralMan]

2. That's what they get for outsourcing development.

Seriously.

[kestrel91316]

3. I wound up with some trojan viruses and wonder if they came from my

backup hard drive's software........

[Edweird]

4. You don't need software to charge batteries.