Printable Version of Topic

Click here to view this topic in its original format

yourNAV | Forums _ Firmware _ Virus Found On Go 910

Posted by: chrisk Nov 8 2006, 11:40

I had the wierest thing happen to me..

I just got my hands on a tomtom go 910 and when first connecting it to my laptop (with Mcafee current defs) it detected a virus in the autorun file. When running a backup (using the tomtom home software) it also found a virus in a file called "copy" and a file called "host". Nothing else was found.

Unfortunatly mcafee deleted the files.

Does anyone know what these files are for? Any way to replace them?

Posted by: Jolly Roger Nov 8 2006, 13:47

Does McAfee keep log files, it might tell you what virus it thought was there, and is it really deleted or moved to a secure backup?
Is this a new 910 or second hand, the files might not be tomtom`s own, if they are part of the OS then just download a new copy pardon.gif

Posted by: chrisk Nov 8 2006, 23:29

QUOTE (Jolly Roger @ Nov 8 2006, 23:47) *
Does McAfee keep log files, it might tell you what virus it thought was there, and is it really deleted or moved to a secure backup?
Is this a new 910 or second hand, the files might not be tomtom`s own, if they are part of the OS then just download a new copy pardon.gif


I looked for a log file and can't find anything. I even looked at event viewer.

It was really deleted - nothing is in quaranteen.

Supposed to be a new 910 but I get the impression based on the box condiition that it was opened perhaps by the store (maybe as a demo). The unit is in A1 condition so I don't really mind.. It has just the virus that has got me worried..

I did run the upgrade (which looks like included the firmware upgrade) avalable via tomtom home and it all appears to work ok.

Does anyone have a autorun in the root drive, copy and host file (I think the copy and host files were in sub directories but not totally sure? on their 910 ?

Thanks so much!!!!!

Posted by: lboln Dec 11 2006, 07:02

QUOTE (chrisk @ Nov 8 2006, 23:29) *
QUOTE (Jolly Roger @ Nov 8 2006, 23:47) *

Does McAfee keep log files, it might tell you what virus it thought was there, and is it really deleted or moved to a secure backup?
Is this a new 910 or second hand, the files might not be tomtom`s own, if they are part of the OS then just download a new copy pardon.gif


I looked for a log file and can't find anything. I even looked at event viewer.

It was really deleted - nothing is in quaranteen.

Supposed to be a new 910 but I get the impression based on the box condiition that it was opened perhaps by the store (maybe as a demo). The unit is in A1 condition so I don't really mind.. It has just the virus that has got me worried..

I did run the upgrade (which looks like included the firmware upgrade) avalable via tomtom home and it all appears to work ok.

Does anyone have a autorun in the root drive, copy and host file (I think the copy and host files were in sub directories but not totally sure? on their 910 ?

Thanks so much!!!!!


Yes, I too found copy.exe and host.exe on the 910's NEW hard drive, right out of a new sealed box, and when attempting to backup the 910's contents, my antivirus alerted me to two viruses, W32/Perlovga.A.1 and TR/Drop.Small.qp/

Not really sure what copy and host do, other than possibly autorun files to start the home software perhaps. I am going to try to phone TomTom tomorrow and ask what's with the viruses. I bet they deny that they're there!

Lbolen

Powered by Invision Power Board (http://www.invisionboard.com)
© Invision Power Services (http://www.invisionpower.com)