 |
Assiste.com
| |
Exécution automatique : risque de propagation de virus
L'exécution automatique est un facilitateur de la propagation des virus. Sa désactivation est une règle d'hygiène fondamentale de sécurité du poste de travail et des serveurs.
16.09.2023 : Pierre Pinard.
 |
|
Dossier (collection) : Encyclopédie |
|---|
| Introduction Liste Malwarebytes et Kaspersky ou Emsisoft (incluant Bitdefender) |
| Sommaire (montrer / masquer) |
|---|
Les dernières grandes affaires de diffusion massive de support contaminés (CD-ROM & Floppy Infections)
Windows 1.0 est sorti en novembre 1985 et n'a pas d'existence réelle. La première version qui tienne à peu près la route sera la 3.1 d'avril 1992. Les fichiers « autorun.inf » ou « autorun.exe » n'existe pas encore.
- Dans son numéro de mai 1991, la revue informatique Soft & Micro, que l'on trouve dans tous les kiokes à journaux et que l'on reçoit sur abonnement, est victime d'une erreur de manipulation par la société chargée de la duplication des disquettes qui vont être offertes gratuitement avec cette revue. Deux hackers ont introduit le virus Frodo sur une disquette de démonstration d'un logiciel qui n'a rien à voir avec la disquette de Soft & Micro. La société de duplication manipule cette disquette sans s'apercevoir qu'elle est contaminée. En assemblant le « master » (la « maquette ») de la disquette pour Soft & Micro, avant de mettre ce « master » en duplication, Frodo saute sur ce « master ». La duplication est lancée et Frodo se retrouve sur les 60.000 disquettes distribuées. Malheureusement, entre autres, une société dont le métier est de prendre en sous-traitance la comptabilité de milliers d'entreprises est contaminée et contamine ses clients ! Une plainte est déposée. Un procès va durer 4 ans avec appel, cassation et nouveau procès. Soft & Micro ne s'en remettra pas et disparaîtra (absorbée par la revue SVM). La 10.02.1994, la 29ème chambre correctionnelle de Paris condanne :
- Les deux employés de la société de duplication à 2 ans de prison avec sursis et à 1 million de francs de dommages et intérêts au profit de Soft & Micro
- 2 millions de francs de dommages et intérêts au profit des auteurs du logiciels qui devait être promu et vendu grâce à cette disquette publicitaire. au profit.
- 500.000 Frs de dommages et intérêts au profit du cabinet comptable victime du virus
Ils iront en appel le 15.03.1995, qui confirmera les dispositions du 10.02.1994 de la chambre correctionnelle, puis ils iront en cassation. La Cour de Cassation, Chambre criminelle, du 12 décembre 1996, 95-82.198, cassera l'appel en toutes ses dispositions pour qu'il soit à nouveau jugé. Il est trop tard. Soft & Micro n'existe plus.
- En 1997 : la version de démonstration de Vellum 3D 3.0, pour Windows 95 & NT et Power Macintosh, embarque le virus Macintosh MDBF.
- En 1998, plusieurs magazines spécialisés en informatique distribuent des disquettes infectées par CIH (Tchernobyl) et Marburg.
- En 1999, Microsoft diffuse une version bêta de Microsoft Office 2000. Le CD-ROM 3 embarque le virus Laroux (le 1er macro virus Excel).
- En 1999, IBM vend des ordinateurs neufs, Aptiva. Le système d'exploitation est infecté par le virus CIH (plus connu sous le nom de Tchernobyl).
- En 1999, le CD-Rom de LinuxPPC (Linux for Power PC) version 5 est infecté avec le virus AutoStart. L'origine du virus est localisé en Chine et on s'apperçois que ce sont tous ces CD-Rom, et probablement d'autres, qui sont infectés par le virus AutoStart :
- Linux for Power PC distribution de la version 5
- Sierra's Hoyle Card Games CD for Mac or Windows (Autostart.D)
- Brio Enterprise 5.5.5
- A "www.stockphoto.com" CD
- MOTU Digital Performer 2.43
- Arboretum
- APS
- MacWorld Games
- MacAddict (Autostart.D)
- An Agfa Scanner driver CD
- A GCC printer installer CD
- A Xante printer utility CD (Autostart.D)
- Konica « Picture Show » (floppy, also with an unnamed trojan)
- A BIOPAC demo CD
- CoStar LabelWriter
- A Tony Stone stock photos CD (some were found with "signs of infection", but no actual worm)
- Umax Astra 1220U Scanner Driver (with multiple viruses)
- A Digital Performer CD
- An IPEX 98 CD
- An Alfa Romeo advertisement CD
- MacAcademy
- A Marilyn Manson CD (a "dead" non-working copy)
- An NFOEC Proceedings library CD
- Photo/Graphic Edges 4.0
- The SIS Nostalgia Collection
- Digital Vision (several UK titles)
- Typeadelic
- Activision Pukka PR
- Etc. ... Voir le paragraphe ci-dessous (« Derrière le rideau ») pour d'autres nombreux exemples.
Aujourd'hui, Internet à totalement modifié la distribution des virus qui cherchent la contamination massive par le biais du réseau (Spam, BotNet, Exploit, etc. ...). Mais vous n'êtes pas à l'abri d'un copain qui déboule chez vous avec sa clé USB en hurlant : « Regarde le truc génial que je viens de trouver » et qui insère sa clé USB contaminée dans votre machine.
Sans être paranoïaque, la prudence est mère de sureté. Donc, on désactive les démarrages automatiques.
Supports gouvernementaux / commerciaux / de presse / d'éditeurs de logiciels, tous interlocuteurs de confiance, infectés par des virus. Mise à jour septembre 1996.
Sep 96
Revised
STEWS-GC-SD-S (380-19a)
MEMORANDUM FOR RECORD
SUBJECT: Viral Infections in Commercial/Government Media/Software
1. The following list, compiled from VIRUS-L, RISKS-FORUM and
other public sources, identifies virus infections transmitted
through either commercial or government entities in which the
distributor would generally have been considered to be a
"reputable source". If anyone has additional incidents, I would
appreciate receiving such information so that I may update this
list. Any contributor will receive the appropriate credit.
2. I have consciously omitted those incidents in which there
was suspicion that the reporting location was either suspect,
unsure itself as to the source of the infection, or unwilling
to provide full disclosure. I have placed an asterisk (*) besides
those entries which represent an addition from the previous list.
3. MS-DOS INFECTIONS
SOFTWARE REPORTING LOCATION DATE VIRUS
a. Unlock Masterkey Kennedy Space Center Oct 89 Vienna
b. SARGON III Iceland Sep 89 Cascade
c. ASYST RTDEMOO2. Fort Belvoir Aug 89 Jerusalem
EXE
d. Desktop Fractal Various Jan 90 Jerusalem
e. Bureau of the Government Printing Jan 90 Jerusalem
Census, Elec. Office/US Census
County & City
Data, 1988
f. Northern Iceland Mar 90 Disk-
Computers Killer
g. Far Side Moon Japan Apr 90 Nambal/
Artdink Inc. NambaII
(PC Manufacturer shipped infected systems.)
h. PC Today United Kingdom Jul 90 Disk-
(Magazine distributed non-working copy of virus.) Killer
i. Modular Circuit Padgett Peterson Oct 90 Stoned
Technology Utility
Disk
j. DOS-TREND Christoph Fischer Nov 90 Stoned II
Germany
(Magazine distributed infected disks in Issue 10/11.)
k. PC Benelux World David Ferbrache Nov 90 Cascade
1704
l. Shimadzu Photo- Dr. Werner Klotz- Nov 90 Vienna
detection Detec- buecher, Germany
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
tor SPD-M6A Version 2.14
m. Joint Service Fred O'Kelley Nov 90 Stoned
Software System El Paso, TX
(Contractor installed financial system at multiple Army
sites from an infected disk.)
n. Arkanoid II Alex Jauch Nov 90 Jerusalem
o. Modem Protocall Brian Daniel Dec 90 Stoned
One Modem Columbus, GA
Evaluation Novell
IPX & NETBIOS Version
(LAN Source Technologies Distributing distributed.)
p. COMBASE and SVGA- Michael Head/ Dec 90 Music Bug
Utility R. Wallace Hale
q. A-MAIL VCH BIBLIO Lynne Munro Mar 91 1701/1704
Disk 2 of 2 Oxford University
r. Oracle Windows' Sam Daniel Jul 91 Stoned
DDE/Toolbox Demo Unisys
Disk
s. European Patent Iain Noble,UK Aug 91 Stoned
Office (Reported in New
Bulletin Disk Scientist, 10 Aug 91)
t. Sun Microsystems DOE CIAC Bulletin Sep 91 Jerusalem
PCNFS 3.5b B-40
u. Cypress Semi- Padgett Peterson Sep 91 Stoned
Conductor
MAXPROG, version 2.72C
v. PUMPKIN PATCH Various Oct 91 Jerusalem
Screen Saver,
Publishing International
w. PC Paintbrush John-David Childs Oct 91 Michel-
Update Disk University of Montana angelo
from Z-Soft (one site report)
x. Software John Kida Nov 91 Stoned
Perspectives
Demo Disk
y. NTIS Software Various Nov 91 Stoned
Distribution (Federal Computer
Week, November 4, 1991)
z. Zinc Software PCWeek, 25th Edition Nov 91 Form
C++ Library Disk
aa. Virtual Reality PCWeek, 25th Edition Nov 91 Michel-
Lab Distant Suns angelo
Disk
ab. Novell Network DOE CIAC Bulletin Dec 91 Stoned-3
Encyclopedia C-10
Disks
ac. Konami Inc. John Markoff Dec 91 Stoned
Spacewrecked NY Times
Game Disk
ad. Software Pre- AISS Alert 91-18 Dec 91 Michel-
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
loaded in AUVA angelo
350/25 Systems
(Assembled in Taiwan for Information Management
Consultants, Brookfield, WI)
ae. Software Pre- USAISC-AMC Memo Jan 92 Michel-
loaded in Easy angelo
Data Model 386
Systems from Trident VGA Co.
af. Leading Edge National Public Jan 92 Michel-
Preloaded 6,000 Radio angelo
PCs from 10-27
Dec 91
ag. PC Fun Magazine Nick FitzGerald Jan 92 Stoned
Disk New Zealand
ah. Da Vinci Systems Various Feb 92 Michel-
E-Mail 2.0 Demo angelo
Disk
ai. Meridian Data Tim Martin Feb 92 Michel-
Inc. CD-ROM angelo
Extension
Software (special disk shipment to one site)
aj. WIN Laboratory Virus-L Feb 92 Stoned
Systems Preloaded
with MS-DOS 4.01
ak. Sony Laser Virus-L Feb 92 Dark
Library Avenger
Distribution Disk
al. IntelCorp Peter Neumann Mar 92 Michel-
LANSpool SRI angelo
3.01 Disk
am. Symbol Techno- Chris Bray Mar 92 Michel-
logies Preloaded angelo
Systems
an. Neural Networks Bart Kosko Mar 92 Michel-
& Fuzzy Systems angelo
Book with Infected
Disk (one site report)
ao. Chicony Corp John Qualtrough Mar 92 Michel-
Keyboard Tracking White Sands angelo
Ball Software
Disk
ap. Pionex 386 Pro Al Guiterrez Mar 92 Michel-
System Preloaded White Sands angelo
with DOS 5.0
aq. Lotus Development PCWeek Mar 92 Michel-
Corp CD/Networker March 9, 1992 angelo
LAN Version
ar. Netware Support Ken Haynes Mar 92 NoInt
Encyclopedia 900 Support/LAN
(NSE) Standard Magazine
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
Edition (Novell distributed.)
as. Golden/Diamond Chris Mc Donald Jun 92 Fish Boot
International/ White Sands
System Cactus
OCR Disk
at. DacEasy Inc. PCWeek Jun 92 Stoned
Instant Account- June 29, 1992
ing Package
au. Phoenix Data Tim Polk Jul 92 Michel-
Systems Diagnos- NIST angelo
tic Disk for
Ethernet Board
av. Standard Army TRADOC Aug 92 Form
Hazardous
Materials Tracking
System Disk from
Wilson Hill
Associates
ax. International James McLeod Aug 92 Stoned/
Data Systems Aberdeen Proving Michel-
Preloaded 486 Ground, MD angelo
Systems, Model
IDS 4331
ay. Factory Sealed John Melka Oct 92 Michel-
Device Driver Georgia Institute angelo
Disks ID PVGA of Technology
1024x (one site report)
az. Update Disk #48 Ludwig Schumacher Oct 92 Michel-
FAR-TRIEVE, Mainz, Germany angelo
Distributed by
CACI, INC-FEDERAL
ba. Data Disks Rae Rollins Oct 92 Form
from Army White Sands
Contractor
bb. Physical Sciences Chris Mc Donald Nov 92 Michel-
Lab Proposal Disk White Sands angelo
92-A0117
bc. Star LC24 Print Otto Stolz Dec 92 Vacsina
Driver Disk Loader
(no replication)
bd. FUJITSU Germany Klaus Brunnstein Jan 93 V-Sign
Printer Disks VTC, University of
Hamburg
be. DCA Printer Virus Bulletin Jan 93 NoInt
Driver Disks UK
bf. Coleman Research Chris Mc Donald Feb 93 Stoned
Proposal Disk White Sands
CEP/93-001
bg. GTE Government M. Hanzlik Mar 93 Stoned/
Systems Corp Fort Belvoir
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
Preloaded 386SX Michel-
on Contract Number F09603-91-0-0999
bh. Hoskyns' Project Virus Bulletin Apr 93 Form
Manager Workbench UK
Software
bi. STIG 486 PCs James McLeod Jun 93 Stoned
Preloaded on Aberdeen Proving
VGA Disk (50 Ground, MD
systems)
bj. Telemate Tapio Keihanen Jun 93 Stoned
File TM411-4. Virus-L/Winfred Hu,
ZIP Telemate Author
bk. COOP Supermarket Harvey Stein Jul 3 Stoned/
Game Disk, ZOOM, Virus-L DIR-II
Distributed in
Israel
bl. CIX Online Iolo Davidson Jul 93 Butterfly
Service Posted S&S International,
SPORT21C.ZIP UK
bm. IBIS Training Joe Reich Sep 93 Michel-
Class on Harvard Fort Monmouth, NJ angelo
Graphics with
Distribution of
Infected Disks to
Students
bn. Long-Term SLA Linda Hodgson Oct 93 Form
Training Class Pine Bluff, AR
Distribution of
Infected Disks to
Students
bo. So Much Shareware Bill Lambin Dec 93 Power
Vol II CD, Power- Pump
User Software
Distributed with
Infected File
XYPHR2.ZIP
bp. Oliver Marketing R. Wallace Hale Dec 93 Jerusalem
Inc. Distribution /Stoned
of Demo Disks
(The date shown is the date of the report, not of the
incident.)
bq. PURS Program Disk Bas van der Most/ Feb 94 SatanBug
Distributed by Jim Silsbee, MTMC
5th Signal Command
in Europe br. Die DFUe-CDROM Peter Immond Jun 94 Crusader
Distributed by Virus-L
Mediaplex
bs. Nine Files on Katherine Prouty Jun 94 Chill
PBS Forum on ZiffNet Forums
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
ZiffNet Manager
bt. Demo Version Larry Rouse Nov 94 AntiCmos
2.0 GPSLOG by DOE, NV
Sandia Research
Associates Inc
bu. Preformatted Virus Bulletin Nov 94 LZR
Disks from China UK
in Finland and
Sweden (20,000
Estimated)
bv. Laptops Delivered ASSIST Bulletin Dec 94 Monkey
by IDP Corp under # 94-35
Navy Contract
N66032-92-D-0002
bw. Army Distribution Robert Bowlby Feb 95 AntiCmos
of Software for
Internal Use
bx. European Klaus Brunnstein Feb 95 Gallicia
Commission Office VTC, University of
Distributed Hamburg
1,000 Disks
by. Microsoft Virus-L Feb 95 Form
Distributed 200
Disks in UK
bz. MITSUMI Mouse Virus-L Feb 95 Form
Driver Software
Model ECM-S31
Type
ca. Night Owl 15 Virus-L Feb 95 Taipan.666
CD-ROM with
File DMNCHEAT.ZIP
cb. ARTEC/Genius PC Digest/WS Mar 95 Anti-Tel
Mouse Drivers Computer Publishing
Corp, Philippines
cc. CD-ROM The Gates Virus Bulletin May 95 Tai-Pan
of the Underworld UK & Goldbug
Distributed by
Home Grown
Productions Ltd
cd. Data Expert 486 Steve Clark Jun 95 NATAS
Systems Preloaded Aberdeen Proving
Ground, MD
ce. American Online AFCERT Jun 95 Bupt
Distribution Kelly AFB, TX
Disks
cf. Merriam-Webster Information Week Jul 95 AntiExe
Electronic July 3, 1995
Version of
Collegiate
Dictionary and
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
Thesaurus (500 Units Shipped)
cg. Ford Motor Co. Tampa Tribune Aug 95 Monkey
Public Relations July 31, 1995
Disk
ch. Microsoft Virus Bulletin Oct 95 WinWord.
Distribution of UK Concept
Windows 95 Soft-
ware Compatibi-
lity Test Version
4.0 CD-ROM
ci. ServerWare Virus Bulletin Oct 95 WinWord.
Distribution of UK Concept
Snap-on Tools
for the Windows
NT Professional
CD-ROM
cj. DEC Distribution Virus Bulletin Sep 95 WinWord.
of DECUS Disk UK Concept
ck. PC Magazine Virus Bulletin Oct 95 SAMPO
Distribution UK
of "Editor's
Day" Disk
cl. Ziff-Davis UK Virus Bulletin Jan 96 Parity_
Ltd Distribution UK Boot.B
of Electronic
Christmas Card on
Disk
cm. Powersoft Multi- David Kennedy Jan 96 Taipan.
media U.S.A. from NCSA Forum 666
Distribution of
CD-ROM "101 Card
Games"
cn. Microsoft David Kennedy Jan 96 WinWord.
Distribution of from S & S Concept
CD-ROM "The International
Microsoft Office
95 and Windows 95
Business Guide"
co. OSD C3I Distri- Thomas Bozek Feb 96 Ripper
bution of disk OSD C3I
"40th ARMA
Conference"
cp. Alpine Media Wayne Riddle Mar 96 B1
Distribution of NCSA Forum
Microsoft
Developer Server
Disk
cq. Assistance Chief Wyland Leadbetter Mar 96 WinWord.
of Staff for COL, DAIM-MD Concept
Installation
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
Management
Distribution of
Biographies Disk
cr. Industrial Laura Steen May 96 AntiCmos-
Computer Source ICS Customer A
(ICS) Distribu- Engineering Manager
tion of Windows
95 Driver Disks
for ROCKETPORTXX
* cs. HQ FORSCOM John Mitchener Sep 96 WinWord.
Distribution of White Sands Concept
Uuencoded Files
over the Internet
4. MACINTOSH INFECTIONS
SOFTWARE REPORTING LOCATION DATE VIRUS
a. Freehand Various Mar 88 MacMag/
Peace
b. QLTECH MegaRom Various Oct 88 nVIR
c. MS Word 4 Various Oct 88 nVIR
d. STELLA 2.0 EARN Oct 88 nVIR
e. CMS HardDrive Various Nov 88 Scores
Utilities, Ver 3.4
f. NoteWriter Colgate College Sep 89 Scores
& nVIR
g. Brady Hypercard Various Sep 89 nVIR A
1.2.2 within the
Book Applied HyperTalk
h. Grammitik Various Jan 90 WDEF A
i. MacPublishing David Ferbrache Jan 90 WDEF
Font Disk
j. Chessmate 2100/ Various Apr 90 WDEF
Cribgin
k. CC-on-Diskette Mike Tyo Apr 90 WDEF A
Distributed by the
Institute for
Scientific Information
l. Diskworld Diskette Chuck Hoffman May 90 WDEF
Softdisk Publishing
m. Excel Microsoft Gail Lawley Jun 90 WDEF
n. SecureWare INC Marshall Abrams Aug 90 nVIR
o. Rodime PLUS/RX Paul Woodman Feb 91 WDEF A
Praxis Software
Engineers
p. Seiko PS-X Printer ASSIST Jul 92 CDEF
Driver Software
Distributed by
American Computer
STEWS-GC-SD-S (380-19a) Sep 96
SUBJECT: Viral Infections in Commercial/Government Media/Software
Resources, VA
q. Standard Distribution Jim Huggins Oct 93 nVIR
Disks for University Michigan Daily
of Michigan Computer
Kickoff Sale
r. CD-ROM Journal of CIAC May 94 nVIR
Vacuum of Science &
Technology, Vol 12,
1Q94
s. CD-ROM within Brian Nickels Sep 94 WDEF
UK MACFORMAT Adelaide, Australia
t. Macintosh System NASA Automated Oct 94 MBDF
7.5 Sample Upgrade Systems Incident
Kit (HDSC Setup and Response Capability
Disk First Aid
Applications
u. West German Dis- Klaus Brunnstein Nov 94 MerryXmas
tribution of 4,000 Hamburg
CD-ROMs with MacTools
and MacPower Collection
v. MacUser, UK Edition, OXCERT May 96 MDBF-A
Distribution of
CD-ROM with One
Director Movie
Infected
5. ATARI INFECTIONS
SOFTWARE REPORTING LOCATION DATE VIRUS
WordUp 2.0 Various Sep 89 Key
6. AMIGA INFECTIONS
SOFTWARE REPORTING LOCATION DATE VIRUS
Sama Software Inc Leonard Fetterhoff 1988 Byte
Disk Distributed in White Sands Bandit
AmigoTimes
7. Individuals may forward any information on additional incidents
to cmcdonal@wsmr.army.mil.
Source| Annonce |
| |
FAQ
Démarrage automatique, média amovible, exécution automatique, exécution à l'insertion, autorun, autorun.inf, autorun.exe, commandes exécutées automatiquement, activer, désactiver, CD-Rom, DVD-Rom, Blu-ray, Carte mémoire, Clé USB, disque dur externe, carte flash, iPod, lecteur mp3, appareil photoExécution automatique