Battery charger there was a backdoor trojan?

United States Computer Emergency Response Team (US-CERT) has warned that the software is in the battery charger Energizer USB Duo contains a backdoor that allows others to access the computer system from unauthorized remote. US-CERT warned that the installer for the software will bring the Energizer DUO UsbCharger.dll files in directory and file applications in Arucer.dll Windows system32 directory.

Energizer UsbCharger When software is executed, it will open the component to provide communication UsbCharger.dll USB. UsbCharger.dll will execute via a mechanism Arucer.dll Windows rundll32.exe, and also configure it automatically when Arucer.dll in Windows by making a mark in the registry HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run.

There are risks such as an intruder can control the system remotely, including sending files or executable programs. According to US-CERT, a backdoor component on Energizer UsbCharger software can be removed by deleting files from the file Arucer.dll Windows system32 directory. Because backdoor is run by rundll32.exe, the file will continue to run though, the software was in-uninstall, and Windows needs to be restarted before the file can be deleted. Users who have been hit by this backdoor must also block TCP port 7777 so as not to spread this jaringan.Hal can be done because the backdoor in the software does not automatically add the Windows Firewall to block ports 7777 or backdoor application. Therefore, Energizer UsbCharger first planted, then the user will be told about "Run a DLL as an APP" is already blocked by Windows Firewall.

Source www.Beritanet.com