Slashdot Mirror
McDonalds Japan Distributes Infected MP3 Players
Tamas Feher from Hungary writes, "Finnish antivirus vendor F-Secure reports that Mcdonalds in Japan distributed 10,000 infected MP3 players as customer prizes in a promotion with Coca-Cola. The USB sticks contained 10 free songs plus the QQPass Trojan, which is intended to steal login data. F-Secure reports that they have heard, but cannot confirm, that simply plugging the USB device into a Windows PC is sufficient to get infected. Investigation is still going on, but the mishap apparently happened in Hong Kong. Patrons nationwide are urged to quickly return their M-logoed sticks for replacement or call a 24hr hotline, if unsure." Here is the Mcdonalds Japan announcement (in Japanese, but Babelfish at Altavista handles it well).
It's 'ok' to leave Ronald McDonald alone with your children but you keep him the hell away from your computer.
My work here is dung.
and a virus with that mp3?
Congratulations! You've won a year's supply of clogged arteries and a reformatted hard drive.
Crack - Free with every butt and set of boobs
...you should see the fries.
By summer it was all gone...now shesmovedon. --
2006 October 13th
//www.mcdonalds.co.jp/
Our company campaign prize "MP3 player"
In regard to virus infection
This time, the Mcdonald's Co., Ltd. corporation August, "the MP3 player (below, this prize September 29th dispatch)" of the prize in the sales promotion campaign which is executed part having been infected to the virus was ascertained.
As for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. Therefore, in order use not to do this prize to the customer, we inform.
As factual concern rapidly and it pursues cause, in order that annoyance of the customer is stopped in minimum, you take concerning future correspondence and hurry and report.
1. Summary and condition of infection virus
The virus of Troy wooden horse type, the worm and the spy wear were discovered.
As a phenomenon, the occasion where this prize is connected to the personal computer, on that personal computer "the Chinese memo pad stands up", "message of virus inspection was made", and so on you question and 7 cases have received wooden pail communication in as of 12 days.
2. Customer correspondence
(1) the returns doing rapidly, we execute or less all notification activity in order to receive.
The @ direct call to the customer who is elected and execution of the direct mail
NotificationonA our company home page
Notification with B shop front
Notification with C newspaper medium
(2) as for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. Therefore, in order use not to do this prize to the customer, we inform.
Thing of the personal computer where the customer who this prize is used has become in use was considered and the system which download it can receive the virus extermination software was constructed. We link the downloadsight from the MacDonaldhome page.
(3) concerning the MP3 player of the prize, making all item collect rapidly, as soon as to receive, be able to prepare you exchange with the new item.
MP3 inquiry Executive Office
Presently TEL. 03 - 5148 - 509924 hour systems
October 14th (Saturday) 9:00AM - TEL. 0120 - 221 - 04724 hour systems (October 22nd (day) to) TEL. 0120 - 221 - 0479: 00 - 21: 00 (October 23rd (month) from)
MacDonald
Home page Http:
3. Infection route of virus and cause of infection
As for this prize the marketing store corporation (Hong Kong) from it is something which is delivered. Concerning the cause of infection, presently it is in the midst of investigating. Being placed on the customer, very much, you say and do not divide, apologize deeply. As in the future similar thing does not occur, it starts strengthening company internal system more.
MP3 campaign summary
Of period: August 4th (gold) - 31 days (wood) [ prize dispatch target date: September 29th (gold) ]
Prize item: Original music entering MP3 player
The number of successful candidates: 10,000 people
Application method: At the private portable campaign sight it inputs the serial number which is stated in the drink of L size during period, challenges in the game.
Why do I get the impression that if they had included the 'other' kind of Trojan, the outrage would have been much greater?
The theory of relativity doesn't work right in Arkansas.
Slashdot Burying Stories About Slashdot Media Owned
For a new "viral marketing" scheme?
and so does wikipedia http://en.wikipedia.org/wiki/Hong_Kong
Hong Kong Special Administrative Region of the People's Republic of China apparently, so how come McDonalds Japan is getting blamed for this?
This is my sig. There are many like it but this one is mine. My sig is my best friend. It is my life.
At least the McDonald's deep-fried MP3 sticks did not come with a finger.exe command.
Where were you when the voynix came?
... still, I guess you're okay if you're an Apple MacDonalds user.
I can see it now - a huge lawsuit, but McDonald's and Coca Cola will settle out of court. What the settlement will boil down to is $40,000,000 US for the attorneys, and a choice of supersizing their combo or a free apple pie for the victims...
Seven puppies were harmed during the making of this post.
"I can see it now - a huge lawsuit, but McDonald's and Coca Cola will settle out of court. What the settlement will boil down to is $40,000,000 US for the attorneys, and a choice of supersizing their combo or a free apple pie for the victims..."
Or they'll settle out of court for a NICE HOT CUP OF MCDONALD'S COFFEE !!!!
Where were you when the voynix came?
Oh wait, wrong country.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Yeah, give me the Big Hack combo.
First a story about loss of privacy concerning personal data, now this story about Ronald taking your bank account login details? Why weren't fast food companies mentioned in 1984?
Support NYCountryLawyer RIAA vs People
What'll get you first; the rootkit, the battery fire, or the really awful music?/p?
I don't read ACs: If a post isn't worth so much as a nom de plume to its author then I wont bother either.
They have all sorts of crazy fast food there, it's amazingly creative. The McDonalds in Japan are better than the ones in the states which in turn are better than the ones in Europe where I am right now(though they don't have infected mp3 players...yet).
:P
Actually, I would have to say that fast food(and ramen shops where 500 yen can get you a huge bowl of awesome ramen) is one of the things I miss most about living in Japan. Though the beer here in Germany does help to compensate
Monstar L
See point #1.
Google translated page.
*Stretches out* Okay, here goes nothing... 2006 October 13th In regard to our company MR3 player prize virus infection The Mcdonald's Co., Ltd. corporation August's recent prize promotion contained a virus in the MP3 player. It is possible that users could be infection just by connecting the prize to their PC. Therefore we ask that customers do not connect their prize MP3 player to their PC. In order to minimize customer annoyance we recommend you report the prize to us as soon as possible. 1. Summary of the Virus A Trojan Horse virus/worm/spyware was discovered on the MP3 Players. When connected to the PC the virus will cause "the Chinese memo pad stands up" (???), a message that the virus has inspected your computer and so on. 7 cases have been recieved of this virus infecting computers in the 12 days since the MP3 Players were given out. 2. Customer correspondence (1) We are informing our customers of the issue via direct calls to their homes, our companies home page, signs at our many locations and via local newspapers. (2) There is a possibility that connecting the MP3 to your computer alone is enough to cause infection, therefore we advise winners to not connect the Player to their PC.as for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. We have also created an anti-virus and put it on our site in the downloads section. (3) concerning the MP3 player of the prize, making all item collect rapidly, as soon as to receive, be able to prepare you exchange with the new item. MP3 inquiry Executive Office Presently TEL. 03 - 5148 - 509924 hour systems October 14th (Saturday) 9:00AM - TEL. 0120 - 221 - 04724 hour systems (October 22nd (day) to) TEL. 0120 - 221 - 0479: 00 - 21: 00 (October 23rd (month) from) MacDonald Home page Http: //www.mcdonalds.co.jp/
3. Infection route of virus and cause of infection
The marketing store branch of McDonalds in Hong Kong apologizes for the infection. Concerning it's cause we are currently investigating that. We apologize again for any trouble, in the future we will strengthen our internal security so this doesn't happen again.
MP3 campaign summary
Of period: August 4th (gold) - 31 days (wood) [ prize dispatch target date: September 29th (gold) ]
Prize item: Original music entering MP3 player
The number of successful candidates: 10,000 people
Application method: At the private portable campaign sight it inputs the serial number which is stated in the drink of L size during period, challenges in the game. (???)
As you can tell I had some problems in two areas, I honestly have no idea what in the world those are supposed to mean. This is a very rough translation, coming from basicly translating a bad translation, but it's better than nothing...
There are two kinds of fool One says 'This is old therefore good' Another says 'This is new therefore better'- Dean Ing
"McDonalds: Making you AND your computer sick."
I caught the Mountain Wumpus! He gave me his treasure chest ($100) to let him go free again.
I'd be more worried about what they put into their "food".
According to the Microsoft USB FAQ, it is possible to create a USB device which Windows will Autorun. Since Microsoft doesn't include anchors within the document to allow me to link directly to the question, it is:
So, yes, it is possible to make a USB storage device trigger Autorun and run a trojan. I don't know if it's possible in this case, but it is theoretically possible to do with a USB device.
You are in a maze of twisty little relative jumps, all alike.
This seems to be an infected memory stick, not a player. That would be some serious news, by itself, if McDonalds was giving out MP3 players with meals in Japan, viros or not.
"Don't you know you're going to shock the monkey?"- Peter Gabriel
...the burgers aren't the only things at McDonalds that should be served with some serious antibiotics! NOTE: yeah, before you call me on this, I *know* that antibiotics are only good against bacteria, and don't work against virii. Then again, anyone that calls me out probably isn't susceptible to antibiotics either, as you probably need a life to be susceptible to them...
I left my wallet in El Sigundo!
"Patrons nationwide are urged to quickly return their M-logoed sticks for replacement..."
Somehow I think replacement is the least of their worries.
..then whatever McDonalds does is the least of people's worries. The users have real computer problems, which go way beyond any one-time viral threat.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
When asked what I wanted for work while in Japan my co-workers were tired of hearing "ramen". There was a great ramen-ya near the office and I could eat there every day if asked. Their gyoza was da shiznit.
"Where quality is like a dead stinking rat - you just can't miss it."
If you're going to take the trouble, we might as well see the line breaks:
//www.mcdonalds.co.jp/
-----------
*Stretches out* Okay, here goes nothing...
2006 October 13th
In regard to our company MR3 player prize virus infection
The Mcdonald's Co., Ltd. corporation August's recent prize promotion contained a virus in the MP3 player. It is possible that users could be infection just by connecting the prize to their PC. Therefore we ask that customers do not connect their prize MP3 player to their PC. In order to minimize customer annoyance we recommend you report the prize to us as soon as possible.
1. Summary of the Virus
A Trojan Horse virus/worm/spyware was discovered on the MP3 Players. When connected to the PC the virus will cause "the Chinese memo pad stands up" (???), a message that the virus has inspected your computer and so on. 7 cases have been recieved of this virus infecting computers in the 12 days since the MP3 Players were given out.
2. Customer correspondence
(1) We are informing our customers of the issue via direct calls to their homes, our companies home page, signs at our many locations and via local newspapers.
(2) There is a possibility that connecting the MP3 to your computer alone is enough to cause infection, therefore we advise winners to not connect the Player to their PC.as for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. We have also created an anti-virus and put it on our site in the downloads section.
(3) concerning the MP3 player of the prize, making all item collect rapidly, as soon as to receive, be able to prepare you exchange with the new item.
MP3 inquiry Executive Office
Presently TEL. 03 - 5148 - 509924 hour systems
October 14th (Saturday) 9:00AM - TEL. 0120 - 221 - 04724 hour systems (October 22nd (day) to) TEL. 0120 - 221 - 0479: 00 - 21: 00 (October 23rd (month) from)
MacDonald
Home page Http:
3. Infection route of virus and cause of infection
The marketing store branch of McDonalds in Hong Kong apologizes for the infection. Concerning it's cause we are currently investigating that. We apologize again for any trouble, in the future we will strengthen our internal security so this doesn't happen again.
MP3 campaign summary
Of period: August 4th (gold) - 31 days (wood) [ prize dispatch target date: September 29th (gold) ]
Prize item: Original music entering MP3 player
The number of successful candidates: 10,000 people
Application method: At the private portable campaign sight it inputs the serial number which is stated in the drink of L size during period, challenges in the game. (???)
As you can tell I had some problems in two areas, I honestly have no idea what in the world those are supposed to mean. This is a very rough translation, coming from basicly translating a bad translation, but it's better than nothing...
This sig all sigs devours
...which can't possibly infect your computer.
Oh, wait...
"How to Do Nothing," kids activities, back in print!
Next week's headlines: McDonalds aquire McAfee.
Full Tilt
I can't wait for the law requirinq malign electronic life checkings (and sterelization) for all consumer electronic devices...
I have discovered a truly marvelous proof of killer sig, which this margin is too narrow to contain.
A new product line:
Burger, small fries, small soft drink, memory stick containing the QQPass Trojan. - The unhappy meal.
The race isn't always to the swift... but that's the way to bet!
McDonalds jingle You Deserve a Break Today done by American Idol Judge, Barry Manilow.
Do not want
Slashdot Burying Stories About Slashdot Media Owned
This looks like an accident, the incident where IO Data shipped external drives with a remote access trojan preinstalled looks like an accident.
What's to stop something like this from happening on purpose?
Let A be a Taiwanese OEM living on margins as thin as a supermodel. Let B be a spyware company that pretends its products are legitimate and bring valuable commercial notices to the end users. B is willing to pay money to get its product in front of eyeballs. Company A will take every New Taiwan Dollar (about three cents) they can get. Is A going to say no to an offer from B to preinstall B-ware on A-gadgets?
From TFTA (the fine translated announcement): "1. Summary and condition of infection virus The virus of Troy wooden horse type, the worm and the spy wear were discovered. As a phenomenon, the occasion where this prize is connected to the personal computer, on that personal computer "the Chinese memo pad stands up", "message of virus inspection was made", and so on you question and 7 cases have received wooden pail communication in as of 12 days.".
Yeah, Babelfish worked wonders there.
I caught the Mountain Wumpus! He gave me his treasure chest ($100) to let him go free again.
...and I always though Mac users are safe from viruses
Interpol has identified a suspect.
They're labeled M for malicious!
You could have said it was the shit, but that slang doesn't seem to be understood by everyone (what, you mean it's shitty?).
'Yes, firefox is indeed greater than women. Can women block pops up for you? No. Can Firefox show you naked women? Yes.'
Did Somebody Say McVirus? or I'm Infectin' It
I'm lovin it.
.. people do. It's sad that they'll pay nearly a quid for a few slices of apple and whatever, not caring that they can get a whole bag of apples for a quid at any market or supermarket. It's like 'There you go, little Porketta. Here's a few slices of apple - eat them up, they're good for you. Well, after you've had your Big Mac and Extra Fries.'
Am I missing something here? What on earth does Hong Kong have to do with Japan?
I wonder if this will hurt the company's sales of food, because customers will hear "virus" and think something's wrong with the fries instead of the chips.
Just don't order the Snow Crash shake.
Revive the Constitution.
McDonalds, being the fast value place, "merely installed" a trojan, probably of mediocre quality.
Sony, being a high class electronics firm, installed the rootkit that cinched Mark Russinovich's job with Microsoft.
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
They steal your bank account number and then put $7,50 on each day and then appears a message that if you don't go to McDonalds and spend your 7,50 that your hard disk will be wiped. Once you are addicted they stop giving you free money...
Custom electronics and digital signage for your business: www.evcircuits.com
The other way to look at it is this. Send out a password grabber virus, wait 24 hours, and then tell people to return the memory stick. Is that a wise idea? Could it be that all the passwords are ON the stick people return?
Me and my trojaned MP3 stick
:(
Stole my password, now I'm assed out
Wish they just had the Monopoly
Game like in that other country
Ba da da da daaa
I'm hatin' it
https://www.eff.org/https-everywhere
Cardiovascular disease, diabetes mellitus, and malware! Where do I sign up?
If you can read this sig, you're too close.
We have determined that a portion of the MP3 Players distributed in August as part of a special promotion have been compromised by virii. This virus is capable of infecting a computer when the Player is connected. We strongly advise that customers not connect these players to their computers. We promise to promptly investigate what caused this to happen and do everything possible to minimize damage to our customers, and will keep you apprised of any changes.
1. Symptoms of Virus Infection
We have found Trojan horse viruses, worms, and spyware. As of the 12th [of October], we have received 7 reports from customers stating that "Notepad pops up with Chinese written in it", "A virus was detected", etc immediately upon connecting the MP3 player to the computer.
2. Customer Support
We have established the following to implement a swift recall of the infected promotional goods:
1) We are directly contacting customers who won the player via phone and email
2) We published information concerning the vulnerability on our website [link in Japanese: http://www.mcdonalds.co.jp/%5D
3) We released information concerning the vulnerability though our franchises
4) We have taken out several newspaper advertisements to advise the public about the vulnerability
2) This virus is capable of infecting a computer when the Player is connected. We strongly advise that customers not connect these players to their computers. We have prepared virus removal software for customers who have already exposed their computers. A link can be found on the McDonalds home page. [see above, in Japanese]
3) We are recalling all infected players immediately. They will be exchanged [for a non-infected player, presumably] as soon as arrangements can be made to do so.
[Snip of contact info]
3. How We Came To Be Compromised
These players were procured through Marketing Store, Co. [n.b. I'm unsure whether they are Inc., Co., LLC. or what have you] of Hong Kong. We are in the process of investigating how they came to be compromised. We apologize to our customers for this incident. [n.b. Think groveling apology, although not unusually so in this sort of context in Japan.] We will strengthen our internal quality control practices to ensure this sort of thing does not affect our customers again.
MP3 Campaign Summary
Period: August 4th (Friday) through 31st (Thursday) (Prizes dispatched approximately September 29th, Friday)
Prize item: MP3 player containing original music
Prizes awarded: 10,000
Application method: L-sized [n.b. Large, although it sure doesn't feel like it when you're drinking one!] drinks purchased during the promotional period had serial numbers. Customers could input these on a special site designed for use by mobile phones. A portion of the serial numbers had been designated as winners.
Help poke pirates in the eyepatch, arr.
Or so I am told.
:-) ).
In Mexican Spanish, the machine is called "aspiradora" (which implicies breathing
IANAL but write like a drunk one.
Beanie Babies with my next Babelfish translation?! Sweet! "Stopping the work of the translator, you will gather the lovely doll!" (Oh will I ever!)
Help poke pirates in the eyepatch, arr.