Slashdot Mirror
Asus Ships Eee PCs With Malware
An anonymous reader writes "'According to an email sent out by Asus, PC Advisor reports, the Eee Box's 80GB hard drive has the recycled.exe virus files hidden in the drive's D: partition. When the drive is opened, the virus activates and attempts to infect the C: drive and any removable drives connected to the system.'"
get Vista to run on that thing?
D:
No, Windows is not a virus. Here's what viruses do:
* They replicate quickly - okay, Windows does that.
* Viruses use up valuable system resources, slowing down the system as they do so - okay, Windows does that.
* Viruses will, from time to time, trash your hard disk - okay, Windows does that too.
* Viruses are usually carried, unknown to the user, along with valuable programs and systems. Sigh... Windows does that, too.
* Viruses will occasionally make the user suspect their system is too slow (see 2) and the user will buy new hardware. Yup, that's with Windows, too.
Until now it seems Windows is a virus but there are fundamental differences:Viruses are well supported by their authors, are running on most systems, their program code is fast, compact and efficient and they tend to become more sophisticated as they mature.
So Windows is not a virus.
It's a bug.
...then maybe this wouldn't have happened?
Take a great concept- the netbook... a small, light, inexpensive, flash-based, long-battery life, Linux based system. Then ruin it by making it a large, heavier, expensive, hard-drive based, medium battery life, MS-Windows based system.
Oh well. I guess some people didn't "get it".
Quoting TFA:
According to Symantec, the malware is likely to be the W32/Usbalex worm, which creates an autorun.inf file to trigger recycled.exe from D:
The real bug is any O/S stupid enough to be designed to automatically execute things on media when loaded. That's a remarkably stupid design.
"Eee PC" =/= "Eee Box"
The Eee PC is Asus' line of netbooks. The Eee Box is Asus' line of nettops. While in some ways they are similar, in other important ways they are very different products.
I bet it doesn't come on the Linux version.
When will we get equal treatment from hardware vendors?
Strange. I am using Ubuntu right now using WPA2 and it seems to be working. Or, I could just be imagining this.
Which is entirely possible, because I can't understand why someone would be afraid to post a slashdot post without clicking the Anonymous button.
- It's not the Macs I hate. It's Digg users. -
That may have been true of the Eee 700 series, but I have an Eee 900 and it had no trouble connecting to my WPA-PSK access point with the default software. It would've been easier with NetworkManager instead of their custom configuration interface, but it worked nonetheless.
What I really don't understand is why, for a project which started out Linux-only, it contains so much hardware with mediocre-to-poor Linux support: the wireless card and the Ethernet adapter both require out-of-kernel drivers; the ACPI interface can't seem to get the battery capacity right; the sound support is flaky at best due to incomplete specs; and yet another driver was required for basic ACPI support (now part of the kernel). I managed to get it all working under a stock distro (Debian) eventually, and I'm quite happy with it -- I like a challenge now and then -- but if you're going to build a Linux laptop, why not pick hardware known to be compatible?
"The state is that great fiction by which everyone tries to live at the expense of everyone else." - Bastiat
The 701 EEE could use WPA-PSK, the wireless encryption common to most consumer grade routers.
What it can't do is WPA-EAP that is commonly found in corporate environments and universities. This is probably what the parent was trying to say. You can see it's SSID, but when trying to connect it only gives a box for you to type the password but nowhere for the username.
The workaround for it was to install the wpa_supplicant package from Debian and hope that it worked.
Unicode in Slashdot
Because the use of Linux was accidental, not the objective. The target was to make it inexpensive.
A DVD player is a single purpose device, it reads data from the drive and may execute some sandboxed scripting, unless there are security holes in the player program it's unlikely to be an issue, and since dvd players are typically standalone its unlikely to be a problem.
A games console is also a single purpose device, it's purpose is for providing entertainment...
A fully fledged computer is not a single purpose device, whereas some are used like games consoles solely for entertainment, some people actually try to get important work done on them and deal with confidential data using them. If something is a toy then fair enough, but for a critical tool that could hold the keys to your business and finances there is no way it should do something so stupid as to execute unknown binaries as soon as media is inserted.
The sooner people separate their devices, and stop trying to conduct business or deal with their finances on the same machine they use as a general toy the better.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
The sooner people separate their devices, and stop trying to conduct business or deal with their finances on the same machine they use as a general toy the better.
No. No. No. Thats exactly what the software/hardware companies want us to do. For example, the TiVo is basically a computer, however, it cannot be modified to run whatever we want it to run unlike a computer. The hardware companies and software companies want us to have one device per purpous, that rather than just having 2 desktops and a laptop they want us to have an iPod for playing music, a TiVo to only record shows, a gaming PC only for playing games, a work PC only to work on, a cell phone only to make calls, a camera only to take pictures, etc.
Taxation is legalized theft, no more, no less.
hack the registry? that sounds hard i think im just going to install gentoo instead.
IranAir Flight 655 never forget!