McDonald’s Japan recalled around 10,000 MP3 players that is part of its promotional prizes, on a statement released by the company last Friday, October 13th 2006.
The recall is due to the fact that some of the MP3 players were found to be infected by WORM_QQPASS.ADH. This worm propagates through removable drives and is the most probable cause of infection.
This worm malware will automatically execute once the infected MP3 player is plugged into the USB drive of the user. This action is caused by the autorun.inf file dropped by the malware which is designed to execute the worm.
There are two other Trojan type malwares that were reportedly found on some MP3 players – TROJ_AGENT.FAO and TROJ_BANLOAD.BGE. The presence of the two malwares may mean that the image used by the MP3 player supplier is already infected.
McDonald’s Japan promptly recalled the promotional MP3 players and opened its phone lines for inquiries.
Trend Micro released OPR 3.845.00 late Friday night to detect all three malwares and prevent any further infection.