Winners of 10,000 MP3 players given away in a Japanese fast-food promotion got more than they bargained for, as their prizes contained a worm. If they connect the music players to their computers to fill them with songs then the worm, WORM_QQPASS.ADH, can infect the computers and steal personal data.
McDonald's Holdings Co. (Japan) Ltd., the Japanese subsidiary of the U.S. fast-food chain, warned prize winners about the infected players Friday. It offered a Web link to software provided by Trend Micro Inc. that can remove the worm from infected computers, and invited winners to return their MP3 players for a free replacement.
The worm spreads from the MP3 player to other removable drives on computers running Microsoft Corp.'s Windows operating system, and attempts to disable some anti-virus applications. If it finds the QQ Instant Messenger application running, it attempts to steal account login information and other chat details, and transmit them by e-mail. The QQ Instant Messenger service is popular in China and South Africa.
McDonald's ran the MP3 player promotion from Aug. 4 to Aug. 31, and sent the prizes to 10,000 winners in late September, according to its Japanese Web site.
Trend Micro first received samples of the worm on Sept. 29, according to its Web site. It rates the risk of damage to a computer infected by the worm as high, but the overall risk as low, given the small number of infections reported so far.
(Martyn Williams, in Tokyo, contributed to this report.)

Sign up to receive Security Resource Alerts
A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.
Download now! »Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.
Download now! »This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.
View now! »