English-转载- Maxtor 硬碟被植木马程式 个人资料瞬间流向北京

全新 Maxtor 硬碟 被植木马程式 个人资料 瞬间流向北京   
自由时报  〔记者杨国文、何瑞玲／台北报导〕 2007/11/10  
全新、国际知名大厂 Maxtor 品牌、大容量的可携式硬碟，惊传已被植入木马程式病毒，一旦安装使用，电脑中的资料就会几乎不知不觉被窃取传送到在中国北京的两个网址。

泰国生产  在台出货约两千台
这批生产地写著泰国的国际知名品牌Maxtor三点五吋、500G可携式硬碟，在台湾出货约有两千台，在接获调查局通知后，代理商及通路商都已全面紧急下架，并将接受退货回收，且已立即换成相近类型但不含病毒的产品上架。

这种全新产品即遭植入木马程式事件，连电脑专家都表示闻所未闻，但却真的发生在台湾。
调查局是在十月间接获民众报案，指新购的可携式硬碟一安装就疑已含有木马程式，调查局获报后相当重视，实地购买同款硬碟，送交调查局资安鉴识实验室分析、测试，证实确有autorun.inf及ghost.pif（恶魔程式）两种木马程式。

可远方窃密  疑中国网军搞鬼
调查局电脑犯罪侦办科发现，该两个木马程式会感染其他插入的随身碟，并感染 autorun.inf、windows.scr 档案，且会主动连线及上传资料到 www‧nice8‧org 或 www‧we168‧org ，经查，登记该两个网址公司都设在中国北京，动机显不寻常。

调查局发现，使用者只要安装该硬碟，电脑程式就会自动连线上述特定网址，电脑资料变成「全都露」，可远距方式轻易窃取电脑资料，研判应是中国网军实施资讯战，有计划窃取我国政府敏感、国防机密及大企业商业机密。

军情单位电脑中毒  后果严重
调查局认为，一般民众很少购买容量如此大的硬碟，若政府机关、军情单位官员电脑连接上此硬碟，国家机密可能会被秘密窃走，「那就严重了」；调查局资安人员也指出，不可轻忽的危机是，透过该可携式硬碟的传递使用，病毒会形成「复式传染」，不同电脑、硬碟都在不知情下被传染，并遭中国监控、下载资料，目前遭感染电脑无法精确估计，倘若我政府机关、重要政党人士的电脑被连锁感染，后果更是不堪设想。

这件全新硬碟竟含木马程式案件，是因今年十月初，有民众向调查局报案指出，他到一家大卖场购买上述硬碟，但回家安装后就发现可能被植入木马程式，他认为，该硬碟是国际知名硬碟大厂製造，品质应该有保障才对，若被植入木马程式病毒，「将很可怕」。

调查局人员查出，该硬碟製造地在泰国，是由台北县建达国际公司于十月初代理进口，疑在泰国生产组装、测试过程即被动手脚，植入木马程式病毒，主要目标应是台湾，但不排除也有其他国家受害。
据了解，北县调查站已查访过建达国际，告知此事及严重性，要求全面回收，并全力追查所有「有问题」的硬碟流向。

新闻来源：自由时报电子报
搜索更多相关主题的帖子: 新闻剪辑

[ News ] the Maxtor hard disk is instantaneous planted the Trojan horse computer program individual material instantaneous to flow to Beijing The brand-new Maxtor hard disk is instantaneous planted the Trojan horse computer program individual material instantaneous to flow to Beijing     The free Times  [ Reporter the Yang Chinese, He Jui the Ling/Taibei reports ] 2007/11/10     Brand-new, the international well-known big plant Maxtor brand, large capacity may take along the type hard disk, the startled biography has been implanted the Trojan horse computer program virus, once installs the use, in the computer material can nearly unconsciously steal transmits to in Beijing, China's two websites. Thailand produces  in produces goods approximately two thousand This batch of production writes Thailand's international well-known brand Maxtor 3.5 吋, 500G may take along the type hard disk, produces goods in Taiwan approximately has two thousand, after receives Investigation Bureau to inform, the business agent and the circuit business all already comprehensive urgent bottom carriage, and will accept the returned goods recycling, also changed into the close type but not to contain viral immediately the product top carriage. This kind of brand-new product namely suffers implants the Trojan horse computer program event, all indicates including the computer experts hears something never heard of before, but actually real occurrence in Taiwan. Investigation Bureau was receives the populace in October to report, refers newly buys may take along a type hard disk installment to doubt included the Trojan horse computer program, after Investigation Bureau attains the newspaper quite to take, really purchased the same funds hard disk, delivered Investigation Bureau capital An? to know the laboratory analysis, the test, confirmed really had autorun.inf and ghost.pif (devil formula) two kind of Trojan horse computer program. But the distant place steals secrets  doubts the Chinese net armed force to do the ghost The Investigation Bureau computer-related crime detects manages the branch to discover that, this two Trojan horse computer program can infect other insertions along with the small dish, and infects autorun.inf, the windows.scr file, also can the driving segment and on passes on the material to   www.nice8.org & www.we168.org , after looks up, registers this two websites company all to be located in the Beijing, China, the motive reveals not commonly. Investigation Bureau discovered, the user so long as installs this hard disk, the computer formula can the automatic segment above specific website, the computer material turn "all reveals", but the long-range way easily steals the computer material, After the research estimated should be the Chinese net armed force implements the information war, has the plan to steal our country government sensitive, the national defense secret and the big enterprise trade is secret. The military situation unit computer is poisoned  the result to be serious Investigation Bureau believed that, the common populace very little purchase the capacity so big hard disk, if the governmental agency, the military situation unit official computer connects this hard disk, the national secret possibly can steal by the secret, "that has been serious"; The Investigation Bureau capital peaceful personnel also pointed out that, may not the careless and indiscreet crisis be, penetrates this may take along the type hard disk the transmission use, the virus can form "the duplicate infection" under, the different computer, the hard disk all in do not know the circumstances of the matter is infected, and suffers China to monitor, the downloading material, at present suffers infects the computer to be unable precisely to estimate, if my governmental agency, the important political party public figure's computer by the chain-like infection, the result is inconceivable. This brand-new hard disk unexpectedly contains the Trojan horse computer program case, is because this year at the beginning of October, some populace report to Investigation Bureau pointed out, greatly sells the field purchase above hard disk he to, after but goes home the installment possibly to implant on the discovery the Trojan horse computer program, he believed, this hard disk is the international well-known hard disk big plant manufacture, the quality should have the safeguard only then to, if is implanted the Trojan horse computer program virus, "very will be fearful". The Investigation Bureau personnel find out, this hard disk manufacture in Thailand, is constructs by the Taibei county reaches the multinational corporation to act in the beginning of October imports, doubts in Thailand produces the assembly, the test process namely passive hands and feet, implants the Trojan horse computer program virus, the essential target should be Taiwan, but does not remove also has other countries to suffer injury. It is reported, north the county investigation station investigated has constructed reaches internationally, informs this matter and the gravity, requests comprehensively to recycle, and traces all "has the question" the hard disk to flow to with all one's strength. News origin:Free Times electron newspaper Search more correlations subject card: News editing The god love is:You since give birth to, hoodwinks me to guarantee hugs, since leaves the embryo, then hoodwinks me to cherish 搋. Is old until you, I was still this; Turns white until you, I still cherished 搋. I have been artificial, also must guarantee hugs; I must embrace, also must save.(Book of Isaiah 46:3-4)

UID 2  Card 746  Essence 15  Integral 613  Reading jurisdiction 255  Comes from Taibei  Finally registers 2008-4-7  Examines individual website Examines the detailed material