Samsung Wave shipping with infected microSD card (confirmed, limited to first run)
By Sean Hollister 
posted June 2nd 2010 7:10AM
posted June 2nd 2010 7:10AM
Update: Samsung HQ got in touch with MobileBurn to confirm the existence of the virus in shipping S8500 Wave handsets, but said that the outbreak was confined to the German market's initial production run and all other shipments are A-OK. Still, there's no harm in disabling autorun before connecting one to your PC, eh?
Live CD + format.
@Glitch Or format it via the phone, assuming Samsung haven't removed the option
@vidoardes
I'd rather not turn the thing on with an infected card, just in case.
@Glitch The virus can't do anything to the phone though, it's a Windows virus...
@Popple3
Sure. But who's to say that the phone's OS or applications won't do something silly and transfer it locally. As unlikely as that is, it's best to be safe than sorry.
@Glitch
1GB fail
Virus fail
Bada fail
Just saying.
And this kiddies is what happens when you browse pr0n on a corporate networked machine. Although I suppose the T1+ Connection makes streaming fast....
@Digi
LOL, exactly. Some bored interns who got this killer task to copy the data on the SD cards seem to have had something better to do than only work. ;-)
@Digi
A T1 connection is only 1.5MBit / second... Most DSLs are far better for surfing pr0n, and don't come with snooping bosses.
I mean... uh... I heard that anyway.
@Digi
T1 is actually pretty slow. Now, get a couple of fiber lines from TWC, Comcast or Verizon then you can really have some fun.
@Digi
T1? Kiddies?
You're showing your age.. and I say that because I'm that old too.. :)
Oops. Shi, Oh dear.
Errr, format.
There's only a 1GB microSD card free with this thing? Wow. Sounds like a time warp!
Why are so many things coming pre-loaded with viruses now? First the USB stick business (although I think that was a stunt to say 'You can get viruses anywhere! Watch out!) and now this. What next, turns out that the new iPhone has a Mac virus installed on it?
@gnargle "What next, turns out that the new iPhone has a Mac virus installed on it?"
well you'd first have to find a decent virus for the mac to begin with.
@bnutzinger That's kinda the point I'm making. It seems so unlikely and yet so do those 2 other occurrences.
@gnargle Oh... didn't get that obviously.
Maybe thats because I didn't think of those events as unlikely.
Tbh I'm quite astonished that this doesn't happen a lot more often.
@bnutzinger In a way you're right, thousands of products are on the market, surely we should hear more of these occurences?
Not the first time this has happened with samsung handsets, the i8510 / innov8 shipped with bundled malware on many handsets (mine included).
AFAIK Win32/Heur is not a virus name, but a name for a virus an antivirus detects with its heuristic analysis but the virus doesn't exist in the virus signature database.
@OS2Waarp Eh?
My brain is full of f***.jpg
@OS2Waarp correct :p you beat me to it
One of the first things I turn off when setting up a new pc, Autorun.
What is this BADAss operating system anyway? an attempt to avoid assimilation by Google?
Might check it out.
@fubarweb Pretty much all I've heard about it is that it sucks ass.
@Khav
Its a fast, quick and nimble OS. Specially targeted for a lower priced smartphone users who dont have the cash to go with the Android or iPhones of the world. Samsung plans to ship this out to phones that cost only $200 or less Full price with no subsidies. No talk about market penetration with pricess like these.
Classic Samsung, I know their after-sales support is piss poor anyway, but they're taking it to new levels by pro-actively making the after-sales experience a positive crock of crap
If you use the microSD card that came with your phone and/or didn't format it first before using it.... you blew it.
@Plazmic Flame If you're using a smartphone OS that begins with A, B, C, D, E, F, G, H, J, K, L, M, N, O, P, Q, R, S, T, U, V, X, Y or Z, you blew it.
Oh Jobsy.
@gnargle I use Windows Mobile.
@Plazmic Flame
All well and good but vendors often ship apps/utils on the SD card that are not available to download. Well Samsung never seem to to!
@BlackBox AH BALLS I MISSED THE W
OT: i just saw that in austria one provider announced, that the galaxy s will be available at the 18th of june, since engadget didn´t say when it's going to be available ( http://www.engadget.com/2010/06/01/samsung-galaxy-s-set-for-simultaneous-launch-in-110-countries-p/ ) i thougt you might be interested...
for those of you who know german...
http://shop.a1.net/is-bin/INTERSHOP.enfinity/WFS/Mobilkom-A1Shop-Site/de_AT/-/EUR/mkDisplayProductInformation-Start?ProductID=99sK9x58EmYAAAEoTvcJAvRu&CategoryName=a1&CatalogCategoryID=pXcK9x58bB0AAAEjOxEweNKH&CustomerType=Private
LOL Samsung FAIL!
So great quality control :P
Same thing happened on my Samsung INNOV8 phone!
Disable AutoRun, delete autorun.inf and whatever file its pointing at (I'd guess it's slmvsrv.exe) and enjoy... No need for re-format, the only way for an USB storage to infect your computer without you knowing/allowing it is via AutoRun... And who needs AutoRun anyways?
Seems like only the initial batch of German market phones were infected by the virus.
http://www.mobileburn.com/news.jsp?Id=9599
@ConceptVBS
I just got my Samsung Behold II last week with a 2g infected microSD as well. It had three different infected files on which I guaranteed two of them and outright deleted the third, it also had the autorun.inf pointing to one of the files as well. I found this while transferring some MP3's to the card on my laptop. The card was brand new, and went from plastic bag to phone, and from phone to laptop.
If I didn't read Engadget and know of these instances, I would probably assume my anti-virus was giving false info. and let the virus run; assuming that it's part of the samsung software suite. What does this virus do? Is it accidently on there or has Samsung put it there to spy on it's customer's computing activities? Very unimpressed by these instances, I assumed everything in the box was fresh off the production line and factory sealed. Surely there's grounds for a lawsuit/compensation if this virus harmed my computer/data/privacy?