From: "Jon Harrison" <ecs-t6x@2rosenthals.com>
Message-ID: <000-2b3a2649-36908.015@seadog.reno.nv.us>
To: "eCS ThinkPad T60/61 Mailing List" <ecs-t6x@2rosenthals.com>
Date: Thu, 20 Nov 2008 20:33:47 -0800 (PST)
In-Reply-To: <list-2112551@2rosenthals.com>
References: <list-2112551@2rosenthals.com>
Priority: Normal
User-Agent: PMMail/3.03 (os/2; U; Warp 4.5; en-US; i386; ver 3.03.00.1202)
MIME-Version: 1.0
Content-Type: text/plain;charset="us-ascii"
Content-Transfer-Encoding: 7bit
Subject: Lenovo malware

Although this info is not applicable to eCS I figure there may be some readers here who  
occasionally use XP on their TP.  So here is something FYI.

Lewis:  If you think this is inappropriate then I apologise and please remove this in that case.

jon


 Thursday November 20, 2008
Lenovo Ships Malware With Software

A Windows XP software package distributed by Lenovo earlier this week was infected with malware. 
The program has been removed from the Lenovo site.

The problem was in the Lenovo Trust Key software for Windows XP, a digitally signed driver package 
for Windows XP SP2 systems. The application is used for secure logon and secure private folders.

Microsoft identified the infection as Win32/Meredrop, a Trojan dropper. Such programs download and 
install other malicious programs. Other anti-virus vendors are detecting the threat as a 'hooligan' 
virus or a porn dialer.

Even though the report indicates that it is the XP version which is affected, the Vista version is 
also no longer available on the Lenovo site. Perhaps the are the same version.

In such cases it is good practice to revoke the digital certificate used to sign the package. I 
have no word yet on whether Lenovo will do this. If they do so and have used the same certificate 
to sign other packages, all of those will need to be resigned and re-issued.

source:
http://blogs.pcmag.com/securitywatch/2008/11/lenovo_ships_malware_with_soft.php