Troubleshooting brontok virus found on my Kindle

rafikius · 07-23-2013, 06:14 AM

I traveled with my Kindle so I had to load my reader battery by connecting the it to USB port of PC's of unknow security level.

I must have caught the Brontok virus this way.

Do U know a way I may get rid of it?

ixtab · 07-23-2013, 08:02 AM

Quote:

Originally Posted by rafikius

I traveled with my Kindle so I had to load my reader battery by connecting the it to USB port of PC's of unknow security level.

I must have caught the Brontok virus this way.

Do U know a way I may get rid of it?

A virus for Microsoft Windows cannot run on a completely different hardware architecture and a completely different Operating System - so what made you come to that conclusion?

As far as I know, there are no Kindle viruses (and I doubt that there ever will be - it's just a totally uninteresting system for malware writers).

You're probably just experiencing some of the random malfunctions that all Kindles seem to expose at times, but without any information of what problems you're having, I'd have to ask my crystal ball, which is currently broken.

Mike L · 07-23-2013, 08:29 AM

Maybe he meant that the "PC of unknown security level" was infected with the virus, and this caused some sort of data corruption on the Kindle. But Ixtab is right": without knowing exactly what is wrong with the Kindle, it's impossible to give any advice.

Mike

HarryT · 07-23-2013, 10:14 AM

Kindles can't "catch" a virus, in the sense of the Kindle's o/s running virus code, but the mountable drive can certainly be a virus "transmitter" from one PC to another, just as a USB memory stick can. Should that occur, you should be able to "disinfect" it using a PC virus scanner.

rafikius · 07-26-2013, 04:23 AM

Quote:

Originally Posted by HarryT

.... but the mountable drive can certainly be a virus "transmitter" from one PC to another, just as a USB memory stick can. Should that occur, you should be able to "disinfect" it using a PC virus scanner.

I know that the virus can not maky any harm to my Kindle's code but as U say: it is using the kindle device as a residence :-) and tries to spread via any usb device pluged into my komp.
And my AV soft (Avast) can't get rid of it. Thanks.
I'm gonna find some the warm dedicated removal tool.

wolftail · 07-27-2013, 04:54 PM

Brontok is a common virus that spreads from PC to PC through the use of USB flash drives. Since the Kindle acts as a USB drive, the virus automatically copied itself on it. (I had some trouble with the exact same virus a while ago.)

These kinds of viruses usually spread by abusing a functionality of Windows to present to the users some options regarding the content of the flash drive/CD/DVD/etc. Windows will look for a file called "autorun.inf" that has some information about programs that can run when the drive is inserted and other options. (This is how installation programs auto start when you insert a CD.) This can be helpful, but it is rarely used on flash drives. Since it is mostly used by viruses to automatically open themselves and infect new PCs when an infected drive is inserted, Microsoft has decided to remove the functionality in newer versions of Windows (since Windows 8 to be more precise).

You can manually disinfect the drive by deleting the files the virus added. You most likely will need to enable the display of hidden files for this. Start by removing the autorun.inf file in the root of the drive. This will neuter the virus and leave it dormant on the flash drive. (It won't be able to autostart when the drive is inserted.) The actual virus file is usually hidden within a folder of the flash drive. Try to search for folders with weird names, folders that you haven't created, and you will most likely find an exe file. Some times the virus is located in a folder named "Recycled"/"Recycle.Bin" or something similar (It even has a recycle bin icon usually). This is an attempt to mimic the legitimate folder where Windows holds deleted files on the hard drive. Delete it and your drive should be disinfected. To be sure, also scan the drive with an Antivirus to be sure. Be careful! By inserting a flash drive in an infected computer, the virus will copy itself back on the drive.

If you want you can use some tools that immunize flash drives by making it hard for viruses to write their own autorun files. You can try: http://labs.bitdefender.com/projects...izer/overview/ . Other AntiVirus vendors offer similar protection tools as well.

Paysee · 09-07-2013, 06:15 AM

I registered at this forum just to add my 2c to this conversation. Hope it is OK to bump up this topic.

I have a Kindle paperwhite, which I do not usually connect to my PC. I did so 1 month ago. Right after that my PC's security (symantec) kept popping up with auto-protect messages that W32.Rontokbro@mm has been deleted.

I was getting this message every 30 seconds!!

I ran the Norton power eraser tool as recommended by Symantec, and got this rid of this virus (or is it a worm?).

Today, I reconnected my kindle to PC, and guess what? Same old w32.rontokbro security alerts!!!

I don't know much about virii, but I would say my kindle paperwhite is vulnerable to and capable of harboring malware.

ixtab · 09-07-2013, 06:36 AM

Your Kindle is no more "vulnerable" than any plain USB stick. From the Computer's perspective, the Kindle in fact *is* a USB hard disk, and nothing more.

07-23-2013, 06:14 AM	#1
rafikius Enthusiast Posts: 28 Karma: 5000 Join Date: Apr 2013 Device: K3 3G	brontok virus found on my Kindle I traveled with my Kindle so I had to load my reader battery by connecting the it to USB port of PC's of unknow security level. I must have caught the Brontok virus this way. Do U know a way I may get rid of it?

07-27-2013, 04:54 PM	#6
wolftail Connoisseur Posts: 59 Karma: 57554 Join Date: Jan 2012 Location: Romania Device: Kindle Touch	Here's how to remove the virus Brontok is a common virus that spreads from PC to PC through the use of USB flash drives. Since the Kindle acts as a USB drive, the virus automatically copied itself on it. (I had some trouble with the exact same virus a while ago.) These kinds of viruses usually spread by abusing a functionality of Windows to present to the users some options regarding the content of the flash drive/CD/DVD/etc. Windows will look for a file called "autorun.inf" that has some information about programs that can run when the drive is inserted and other options. (This is how installation programs auto start when you insert a CD.) This can be helpful, but it is rarely used on flash drives. Since it is mostly used by viruses to automatically open themselves and infect new PCs when an infected drive is inserted, Microsoft has decided to remove the functionality in newer versions of Windows (since Windows 8 to be more precise). You can manually disinfect the drive by deleting the files the virus added. You most likely will need to enable the display of hidden files for this. Start by removing the autorun.inf file in the root of the drive. This will neuter the virus and leave it dormant on the flash drive. (It won't be able to autostart when the drive is inserted.) The actual virus file is usually hidden within a folder of the flash drive. Try to search for folders with weird names, folders that you haven't created, and you will most likely find an exe file. Some times the virus is located in a folder named "Recycled"/"Recycle.Bin" or something similar (It even has a recycle bin icon usually). This is an attempt to mimic the legitimate folder where Windows holds deleted files on the hard drive. Delete it and your drive should be disinfected. To be sure, also scan the drive with an Antivirus to be sure. Be careful! By inserting a flash drive in an infected computer, the virus will copy itself back on the drive. If you want you can use some tools that immunize flash drives by making it hard for viruses to write their own autorun files. You can try: http://labs.bitdefender.com/projects...izer/overview/ . Other AntiVirus vendors offer similar protection tools as well.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Virus Scanner found something	Gustav Gans	Sony Reader Dev Corner	1	01-06-2012 12:48 PM
Can a Kindle get a virus?	Koobe	Amazon Kindle	14	01-01-2012 01:18 PM
Free Book (Kindle/nook/Sony/Kobo) - The Softwire: Virus on Orbis 1	koland	Deals and Resources (No Self-Promotion or Affiliate Links)	4	03-01-2011 04:21 PM

07-23-2013, 08:29 AM	#3
Mike L Wizard Posts: 1,479 Karma: 3846231 Join Date: Apr 2009 Location: Edinburgh, Scotland Device: Kindle 3, Samsung Galaxy	Maybe he meant that the "PC of unknown security level" was infected with the virus, and this caused some sort of data corruption on the Kindle. But Ixtab is right": without knowing exactly what is wrong with the Kindle, it's impossible to give any advice. Mike

07-23-2013, 10:14 AM	#4
HarryT eBook Enthusiast Posts: 85,544 Karma: 93383043 Join Date: Nov 2006 Location: UK Device: Kindle Oasis 2, iPad Pro 10.5", iPhone 6	Kindles can't "catch" a virus, in the sense of the Kindle's o/s running virus code, but the mountable drive can certainly be a virus "transmitter" from one PC to another, just as a USB memory stick can. Should that occur, you should be able to "disinfect" it using a PC virus scanner.

09-07-2013, 06:15 AM	#7
Paysee Junior Member Posts: 1 Karma: 10 Join Date: Sep 2013 Device: Kindle Paperwhite	I registered at this forum just to add my 2c to this conversation. Hope it is OK to bump up this topic. I have a Kindle paperwhite, which I do not usually connect to my PC. I did so 1 month ago. Right after that my PC's security (symantec) kept popping up with auto-protect messages that W32.Rontokbro@mm has been deleted. I was getting this message every 30 seconds!! I ran the Norton power eraser tool as recommended by Symantec, and got this rid of this virus (or is it a worm?). Today, I reconnected my kindle to PC, and guess what? Same old w32.rontokbro security alerts!!! I don't know much about virii, but I would say my kindle paperwhite is vulnerable to and capable of harboring malware.

09-07-2013, 06:36 AM	#8
ixtab (offline) Posts: 2,907 Karma: 6736092 Join Date: Dec 2011 Device: K3, K4, K5, KPW, KPW2	Your Kindle is no more "vulnerable" than any plain USB stick. From the Computer's perspective, the Kindle in fact is a USB hard disk, and nothing more.