910 Virus? Options

[marcuk]

Received a brand new Tomtom GO 910 this morning (still sealed in cellophane). Tried backing up data and the anti-virus software has picked up this virus Virus.Win32.Perlovga.a in the file copy.exe. There isn't any further information on the type of virus. I can't see how a virus has got onto a new TomTom so I'm guessing it's a false detection due to coding. Anybody got any info on this?

Thanks

Marc

[Jessica Rabbit]

Why dont you ring TomTom and ask? 08451610009.

This post has been edited by Jessica Rabbit: Dec 7 2006, 22:14

[postman]

Its more likely your PC has the virus, check out this thread.


http://forum.kaspersky.com/lofiversion/index.php/t21881.html

This post has been edited by postman: Dec 8 2006, 03:54

[lboln]

Received a brand new Tomtom GO 910 this morning (still sealed in cellophane). Tried backing up data and the anti-virus software has picked up this virus Virus.Win32.Perlovga.a in the file copy.exe. There isn't any further information on the type of virus. I can't see how a virus has got onto a new TomTom so I'm guessing it's a false detection due to coding. Anybody got any info on this?

Thanks

Marc

I also just received a TomTom GO 910 from Future Shop in Lethbridge, Alberta. It was brand new, in a sealed box. I installed it on my laptop, and after following their instructions, I backed up the 910 to my laptop before updating anything. During the backup process, my anti virus program, AntiVir from Germany immediatly stopped everything and advised me that I had two viruses in the backup, copy.exe and host.exe. The viruses were W32/Perlovga.A.1 and TR/Drop.Small.qp/

In response to what the first responder said, NO, it isn't on my computer system, it was in the new GO 910 that was being backed up. The anti-virus software pointed to it in F:drive which was the hard drive in the 910 on my system.

I am going to be contacting TomTom in the morning to find out what gives. There shouldn't be a virus like a trojan on a new product! I am very discouraged to say the least.

Other than that the product works wonderfully, and so far I've only noticed a few road errors on my way back Hwy 3 from Lethbridge to BC. Also the downloaded voice of English comedian "Mikey" is hilarious..."Turn around, you're going the wrong way!!! had me laughing until tears were falling down my face!"

But, why the trojans on the hard drive? Anyone else??
lbolen

[lucifer the dark]

Its more likely your PC has the virus, check out this thread.


http://forum.kaspersky.com/lofiversion/index.php/t21881.html

And it's just as likely that the virus is actually on the CD that came from TomTom, they can pop up anywhere if someone is being careless with Windows. It's also the reason why I virus check everything, even cd's that come with magazines.

[RHES]

I bought a 910 a couple of days ago and it did indeed have the Win32.Perlovga.a virus pre installed on the hard drive. Apparently Tom Tom is unaware of computer security issues. Win32.Perlovga.a is a trojan and if you're behind a router or firewall you should have no problem with Tom Toms special software feature. It will infect your computer instantly when you run the Tom Tom Home software. McAfee antivirus detected and removed the Tom Tom trojan and no further problems were detected.

[ManInCamo]

My unit, which I received for Christmas, also had the exact same infections.

FYI: I'm a tech guy by practice and profession, this wasn't something already on the system. It occured, as in the cases above, when I went to backup the files on my hard drive.

[dirtyweerainclou...]

I too got this virus when I purchased a second 910 on 12/12/06

F:\copy.exe
F:\host.exe

F:\copy.exe Threat win 32\perlovga. A virus
F:\host.exe win 32/ Trojan Dropper.small.APL trojan

I deleted it and reported it to TomTom.

[Automan]

My new one from amazon uk - £299.00 also infected.

files are hidden system read only in route of hard drive

autorun.inf (passes infection on by autorun when you connect it to your pc)
copy.exe (run by autorun.inf)
root.exe (payload)

from the command prompt you can check for these by selecting the tomtom drive (normally f:)

then type attrib *.exe

if it list the above files SHR you have the problem.

I disabled my AV for 15 minutes
Then from the tom tom drive

attrib ???.exe -s -h -r
del copy.exe
del root.exe

attrib autorun.inf -s -h -r
del autorun.inf

The above steps are performed at your own risk.

You may wish to also check any other removable drives for the same infection.

I have also logged this with TT Support.

I assume this is the same kind of thing Apple had on some ipods (setup on a pc of course in the factory - not a mac) and McDonalds in Japan.

Automan.

[volumexit]

I have found the same problem with my new 910 bought in Italy. I have deleted the two file (copy.exe and host.exe) but now i cannot explore the disk of my TT 910 because it says it can't find the file copy.exe.
Has anyone else found this problem and solved it?
I will now contact the shop that sold me the TT and get them on the case.

Vol.

[Automan]

That is because the autorun.inf is still present which looks for copy.exe
Also I assume you do have antivirus software on your computer which is up to date?

If so, you should still be able to access the drive direct from the command prompt

select the drive (normally f:)

attrib autorun.inf -s -h -r
del autorun.inf

disconnect the usb device by "safely remove hardware" form toolbar

On next connection autorun.inf will be gone and it will no longer look for copy.exe

Automan.

I have found the same problem with my new 910 bought in Italy. I have deleted the two file (copy.exe and host.exe) but now i cannot explore the disk of my TT 910 because it says it can't find the file copy.exe.
Has anyone else found this problem and solved it?
I will now contact the shop that sold me the TT and get them on the case.

Vol.

[Automan]

Dear Mr Automan,

Please configure your Norton software.

There can be several causes to a Tom Tom device not being recognised by a computer. In the steps below some of these causes are described and ways to resolve these.

• Solutions for connectivity problems on a computer


Follow the steps below to set up a good connection between your computer and your Tom Tom product.
www.tomtom.com/4229

1. Connect your Tom Tom to another USB port at the back of your computer
2. Perform a Reset on your device. (Use an unfolded paperclip to the hole marked Reset underneath the unit)
3. Turn the unit On and wait for the computer to recognise the device.


It may sometimes occur that HOME does not work correctly due to certain settings on your computer.
E.g. FIREWALL and ANTIVIRUS.
NORTON, MACAFEE, NORMAN, AVG

Deleting cookies on your computer may provide the solution.

We recommend first restarting the computer.

• Deletion of cookies and temporary Internet files •

1. Click start, then All programes, accessories, system tools.
2. Click the "Disk cleanup"
3. Next after waiting, click the "OK".

It may take a few minutes before this last step is completed. When the computer has finished, your temporary Internet files and cookies will have been deleted and you can close the window.

Solution: A new application TomTom HOME 1.3 has been made available. When this application is installed on your device, this issue is solved. We recommend that you always update to the latest application using TomTom HOME, so you always have the latest features and the best performance on your TomTom device.
To update to the latest version of the application, please make sure that you have TomTom HOME installed on your computer.
You can find further instructions through the following link:
http://download.tomtom.com/sweet/ap...MEwinlatest.exe
or
http://www.tomtom.com/home

System requirements:

Windows

Windows XP, 2000 or ME (latest service packs recommended), 500 MHz processor or better, 128 MB RAM, internet connection (preferably broadband - DSL/Cable/LAN) for downloading updates, maps or services, Internet Explorer version 5.0 or higher


Should you still not be able to connect, we recommend trying again using another computer. Should you be trying from your workplace, it may be due to security settings related to the network. The best option is to try using a computer outside of your working environment.

Kind regards,

TomTom Customer Support Team


I have replied again....

Many thanks for the update.
However my unit connects to my PC okay and I have the latest TomTom Home software.

The issue (resolved for myself) is the provided device seems to be shipped with trojan software in the root folder of the hard drive.

When tomtom910 links to your PC the file autorun.inf loads copy.exe in an attempt to infect the pc with the trojan.

This file is set hidden system readonly.

Several reports exist of this problem from around the world on the www. do a google search on "tomtom copy.exe" and you will see.

I suspect one or more machines used by yourselves to configure these machines (perhaps to edit the map license keys) has the trojan present.

Apple had a similar problem a while back with ipods being shipped with a virus.

P.S.
I look after the A/V solution for a fleet of over 3,000 workstations.

Regards

Automan.

[oldbwl]

Found this today also

http://www.daniweb.com/blogs/entry1276.html



There really should have been somthing on the Web site, they do after all know about the problem. In fact I bet they even know which units.

[Bill03]

It's on there web site now:- http://www.tomtom.com/news/category.php?ID...&Language=1