The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Java based Trojan dropper has been removed from Lenovo driver download pages

    Discussion in 'Lenovo' started by Baserk, Jun 22, 2010.

  1. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    Dear fellow IBM/Lenovo afficionados,

    The Lenovo driver download section has been infected for a couple of days with an I-frame, serving up a trojan dropper.
    This I-frame was injected into HTML/web pages which caused a redirection which in turn would try to install a Bredolab trojan from some server in China.

    If you have visited the Lenovo driver download pages in the last 48/72 hours and you have not received any warning from your security software, it might be wise to perform a scan with a secondary program.

    To be clear;
    Lenovo have cleaned their webpages by now.
    EXE files, drivers and BIOS-files were/are NOT infected.

    I also have posted a thread on this in the Windows software section.
    Usually I'll never double/cross-post on such an issue but this one requires a bit of attention.
    Cheers.
     
    Baserk, Jun 22, 2010
    #1