Brad new laptop arrived with Worm and Trojan

[hwaterman]

Just got my new laptop and was installing Trend Micro when it found a worm fun.xls.exe and trojan on my D drive, which I didn't have administrative rights too, and these files were in hidden folders.  The stamp date on the files were the date the product was shipped, so it must have happened right before it left the factory.

Would love to know why a brand new laptop would ship with these files.

[NoNoBadDog]

It might have to do with the high number of false positives that Trend Micro is known to report.  They want you to buy their product, so they flag innocuous files as malware.

Live and Learn. 

[zxhwk]

When I ordered my HDX 18t loaded with everything you can think of and a quad core processor with ultimate ,it also came with the same trogans and the fun.xls file as wlel and there are many ways to get rid of it .

Just do a search on that file and it will tell you how to get rid of it and the other names it uses to confuse the user to try and trick you and make you think you got rid of it so be carefull to double check your findings and you will have to edit the registury as wlel to make sure its gone ok.

[Rixander]

to zxhwk

i am very impress of the laptop that you have

i am kind of jealous of you for have something

that good but i like best about you laptop

that you can have a second hard if you wanted

too which i noticed and checke the specs

 and another spec is that you have a larger screen

this is one bad boy laptop you have

i have one question for you did you get the laptop

from HP directly or you order elsewhere beside Hp

[Rixander]

oh about the jealous part

that was a friendly tease

no offense to you

hope that you are okay about that

[dago517]

Hey, hwaterman........ please give rickp400 a kudos. He sounds a little desperate

[zxhwk]

 Its ok no offence taken I really like this machine  it plays all my racing (NFS) games I have and even all the new ones and it doesnt even blink an eye or a glitch in the video I am really impressed with it HP did a right good job this time. 

If your really interested Here are the full psecs of my machine I ordered it direct from HP.COM

--------------------Genuine Windows Vista Ultimate with Service Pack 1 (64-bit)-------------------------------

---Processor Intel(R) Core(TM)2 Quad Processor Q9000 (2.00Ghz)

---Memory 4GB DDR3 System Memory (2 Dimm) - For 1GB NVIDIA GeForce 9600M GT graphics

---Hard drive 500GB 7200RPM SATA Dual Hard Drive (250GB x 2) with HP ProtectSmart Hard Drive Protection

---Graphics card 1GB NVIDIA GeForce 9600M GT

---Display 18.4" diagonal High Definition HP Ultra BrightView Infinity Display (1920x1080p)

---Primary DVD/CD drive Blu-Ray +/-R/RW with SuperMulti
 
---Personalization Webcam + Fingerprint Reader with HP Imprint Finish (Fluid)

---Networking Intel Next-Gen Wireless-N Mini-card with Bluetooth

---TV & entertainment experience HP Integrated HDTV Hybrid Tuner

---Keyboard HP Color Matching Keyboard

---Primary battery 8 Cell Lithium Ion Battery

---OS and recovery media System Recovery DVD with Genuine Windows Vista Ultimate (64-bit)
 
---Productivity software Microsoft(R) Office Professional 2007

---HP extended service plans 3-year HP Accidental Damage Protection with HP Pick Up and Return

---Mogo X54 Express Card Mouse & pointer remote also as a remote for Multimedia operations

---XB4 media docking station & 500 gig personal Media drive

---HP USB TV Tuner ( I wanted this for the FM radion Since they removed the radio from the internal TV tuner card)

---Wireless keyboard & Mouse

[LizBeth]

I don't think it is a false positive as my laptop came with something similar a program called 'Killit.exe' and it had nothing to do with Trend Micro as it was picked up by Lavasofts Adaware.

[melanchete]

Try running eset online scanner: http://www.eset.com/onlinescan/

[viewsonic]

I purchased a DV7T that arrived today infected with the same trojan on drive D and it also had an autorun.inf to launch the trojan.

I never checked drive C, I did ghost it before putting a different OS on drive C.  I wonder if the boot drive was infected also.

I called HP, and was told they would address this with their system build process.

Looks like they just say that to get you off the phone! If this was hapening back when you created this message, and is still hapening now..

The time stamp for my fun.xls.exe and the autorun.inf were 15 days earlier then today.  So my guess is that was the date my drives were built.

I wonder how many PC's they built with this trojan on it.

Message Edited by viewsonic on 09-14-2009 06:15 PM

Message Edited by viewsonic on 09-14-2009 06:17 PM