個人積分：530分
文章編號：4063346
個人積分：171分
文章編號：4063364
個人積分：26分
文章編號：4063419
http://tw.news.yahoo.com/article/url/d/a/071109/78/ny21.html
〔記者范家瑜、卓怡君、李秋明／台北報導〕代理台灣區Maxtor硬碟的資訊通路商建達國際指出，此款有問題的硬碟是以亞太區域為主，建達共出貨約二千台，目前針對經銷商已經進行回收與換貨的措施，但是消費者端則還未進行回收，恐怕已有好幾百台的硬碟流入市面。燦坤則表示，此款硬碟出問題，他們事先完全不知情，也是受害者，有問題的產品已下架，由沒問題的新產品取代。
生產商Maxtor前年底已被另一國際大廠希捷（Seagate）併購，希捷（Seagate）亞太區公關部門昨晚表示，由於希捷為美國上市公司，事涉敏感，此事件需由美國總部了解後再對外發言，但因兩地時差因素，無法聯絡美國總部，目前無法對此事做出任何回應。
目前有問題的產品是Maxtor Basics三點五吋五○○Ｇ與三二○Ｇ的硬碟，以五○○Ｇ的出貨來看，建達在十月份共出貨一千八百台，下架退回一千五百台，也就是流入消費者手中約三百台。目前此款硬碟以燦坤出貨量最多，但已做下架退回動作，目前燦坤架上的商品已經是新款黑色的硬碟，且沒有問題的商品，據了解其他通路還有yahoo！奇摩購物、三井等。
燦坤也受害︰會協調退貨
建達指出，目前經銷商的部分，會陸續作退貨通知，消費者的部份，會在下週一正式聲明，已經購買此規格硬碟的消費者，建達也會完全負擔退貨費用。
燦坤則表示，建達上個月僅告知燦坤，Maxtor有新款硬碟要替換原先店內的Maxtor舊款硬碟，但是卻沒有告知，舊有的商品就是被植入病毒程式的硬碟，因此燦坤毫不知情。調閱資料之後，燦坤統計此款硬碟目前共賣出二百台左右。
燦坤表示，以通路商的角色，已向建達表明，應讓消費者全額退費。燦坤也明確重申，架上已看不到舊款有問題的硬碟，記者實際走訪北縣市店面，確認產品已全數更新。有店員指出，在換成新款之前，建達有針對此款硬碟作促銷的活動，價格約在四千九百九十九元左右。
至於北市光華商場，店家普遍銷售Maxtor其他系列的硬碟，並未發現到Maxtor Basics三點五吋五○○Ｇ與三二○Ｇ的舊款現貨，店家表示，如果要買此型硬碟須先訂貨，根據了解店家訂貨的硬碟，都已經是新款的黑色硬碟。
建達無奈的表示，他們也是代理的角色，事前完全不知情，下星期一會與台灣希捷正式作出回應。建達特別強調，一定會負責作後續處理回收的動作。
個人積分：0分
文章編號：4063473
個人積分：8分
文章編號：4063593
個人積分：112分
文章編號：4063613
amywin wrote:
大家會集體去提出賠償嗎
我想這樣的事情發生在美國應該會付出很大的代價
可是發生在台灣
好像就只是退貨了事而已
看了這個消息真是非常生氣呢
國外......
http://www.theregister.co.uk/2007/09/19/maxtor_harddrives_include_virus/
Kaspersky: Maxtor markets password-pilfering Dutch disk drives
Buy now and get free malware
By Dan Goodin in San Francisco → More by this authorPublished Wednesday 19th September 2007 23:43 GMTSecurity mavens from Kaspersky say they have discovered a nasty virus that came pre-installed on Maxtor external hard drives sold in the Netherlands.
The virus, dubbed Virus.Win32.AutoRun.ah, was found on the Maxtor 3200 Personal Storage, according to this press release from Kaspersky (translated from Dutch to English courtesy of FreeTranslation.com).
The company said the virus roots around a computer in search of gaming passwords. The malicious code also rifles through a computer's contents and deletes mp3 files, according to a separate description of the virus, also from Kaspersky.
A spokesman for Seagate, which recently acquired Maxtor, said the company was investigating Kaspersky's findings. "This scenario seems unlikely because the 3200 does not have any software preloaded on the drive so there is not an opportunity for a virus to be loaded," he said. Yes the drive is formatted but I have never heard of a virus that lives in the master boot record."
The report comes days after the discovery that Medion laptops shipped to stores in Denmark and Germany were infected with a 13-year-old virus. "Stoned.Angelina" was a low-risk virus that infects the master boot record of a hard disk. Apart from its ability to replicate, it carries no payload.
The virus infecting the Maxtor drive, by contrast, was discovered less than four months ago, and considering claims of password theft, it appears to rise significantly above the nuisance level. What's more, it's installed as soon as a user plugs in the drive and double clicks on a corresponding icon, according to Kaspersky. It tries to install itself with an autorun.inf file in the root of the external disk which runs a file called GHOST.PIF.
The virus was found on several Maxtor hard disks of various capacities bought on Monday. Kaspersky speculates they were infected during formating in the factory.
http://forums.vnunet.com/thread.jspa?threadID=121580&tstart=0
Maxtor 3200 External Hard Drive Trojan Horse
Posted: 04-Oct-2007 10:06 Reply
I bought a Maxtor 3200 Personal Storage 500GB hard drive from PC World in Stockport (Manchester) a few days ago.
Immediately before connecting it up I did a full system scan as I always do which came up problem free.
When I plugged it in to my surprise my AVG told me that it had found the following virus - Trojan Horse PSW.Generic4.TUP
On checking the HD it showed both a file - F:\Ghost.pif as well as an autorun program.
個人積分：112分
文章編號：4063818
個人積分：3分
文章編號：4063973
個人積分：1分
文章編號：4063982
個人積分：0分
文章編號：4063997
我去查第一個結果也是如此..
Server Type: Microsoft-IIS/6.0
IP Address: 222.122.180.190 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
IP Location Korea, Republic Of - Korea, Republic Of - Korea Telecom
Response Code: 403
Blacklist Status: Clear
Domain Status: Registered And Active Website
Domain ID:D145807509-LROR
Domain Name:NICE8.ORG
Created On:11-May-2007 07:20:24 UTC
Last Updated On:27-Sep-2007 05:57:07 UTC
Expiration Date:11-May-2008 07:20:24 UTC
Sponsoring Registrar:Xin Net Technology Corporation (R118-LROR)
Status:OK
Registrant ID:JHV8DUH7W9TIL
Registrant Name:ga ga
Registrant Organization:gaga
Registrant Street1:gagaga
Registrant Street2:
Registrant Street3:
Registrant City:gaga
RegistrantState/Province:Beijing
Registrant Postal Code:126631
Registrant Country:CN
Registrant Phone:+86.2164729393
Registrant Phone Ext.:
Registrant FAX:+86.2164660456
Registrant FAX Ext.:
Registrant Email:Whois Privacy and Spam Prevention by DomainTools.com
Admin ID:JHV8DUHMSOOFB
Admin Name:ga ga
Admin Organization:gaga
Admin Street1:gagaga
Admin Street2:
Admin Street3:
Admin City:gaga
Admin State/Province:Beijing
Admin Postal Code:126631
Admin Country:CN
Admin Phone:+86.68492333
Admin Phone Ext.:
Admin FAX:+86.4660456
Admin FAX Ext.:
Admin Email:Whois Privacy and Spam Prevention by DomainTools.com
Tech ID:JHV8DUHO9XXZP
Tech Name:ga ga
Tech Organization:gaga
Tech Street1:gagaga
Tech Street2:
Tech Street3:
Tech City:gaga
Tech State/Province:Beijing
Tech Postal Code:126631
Tech Country:CN
Tech Phone:+86.68492333
Tech Phone Ext.:
Tech FAX:+86.4660456
Tech FAX Ext.:
Tech Email:Whois Privacy and Spam Prevention by DomainTools.com
Name Server:NS2.XINNETDNS.COM
Name Server:NS2.XINNET.CN
