Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

TDSS on the PSP?


  • Please log in to reply
7 replies to this topic

#1 BadgerStorm

BadgerStorm

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:38 PM

Posted 02 June 2011 - 10:27 PM

Recently my computer ended up with the TDSS rootkit. I wasn't immediately aware and connected my PSP to it. Later, I scanned my PSP and Malwarebytes found something. (in addition to my finding a shortcut labeled myporn that lead to system32.) I reset the registry (like so ). Would this fix it? I would love to try and get some music from my PS3 to my clean computer, but I'm terrified of infecting it.

BC AdBot (Login to Remove)

 


#2 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,260 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:12:38 PM

Posted 03 June 2011 - 04:19 AM

TDSS is a Windows-specific infection. As such, a non-Windows system, like that of the PSP, cannot be compromised by it. If, however, you have connected your PSP to your Windows computer and transferred files, then some files on the PSP may have a TDSS dropper.

Since the files on the PSP cannot be trusted when connecting to any Windows computer it is not advisable to do so. If you have a Mac or a PC running Linux, you ought to be able to recover any important files off the PSP before resetting it. Be advised that any such files recovered in this manner must be treated as potentially infected. If you absolutely must connect the PSP to a Windows computer then take the following precautionary steps:

1. Install and update an antivirus program and set it to scan all files upon opening.
2. As you plug the PSP into the computer, hold down the shift key until Windows is done recognizing the PSP. This will prevent Windows from automatically running any file on the PSP.
3. Once connected, have the antivirus perform a full scan of the PSP. Any files found to be infected must be destroyed.

#3 killerx525

killerx525

    Bleepin' Aussie


  • Members
  • 7,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Melbourne, Australia
  • Local time:06:38 AM

Posted 03 June 2011 - 08:48 AM

Also you might want to update the firmware version of the PSP just in case something might of got corrupted.

>Michael 
System1: CPU- Intel Core i7-5820K @ 4.4GHz, CPU Cooler- Noctua NH-D14, RAM- G.Skill Ripjaws 16GB Kit(4Gx4) DDR3 2133MHz, SSD/HDD- Samsung 850 EVO 250GB/Western Digital Caviar Black 1TB/Seagate Barracuada 3TB, GPU- 2x EVGA GTX980 Superclocked @1360/MHz1900MHz, Motherboard- Asus X99 Deluxe, Case- Custom Mac G5, PSU- EVGA P2-1000W, Soundcard- Realtek High Definition Audio, OS- Windows 10 Pro 64-Bit
Games: APB: Reloaded, Hours played: 3100+  System2: Late 2011 Macbook Pro 15inch   OFw63FY.png


#4 BadgerStorm

BadgerStorm
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:38 PM

Posted 03 June 2011 - 05:39 PM

And if I connected the infected PSP to a PS3, could the dropper have copied itself there too?

#5 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,260 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:12:38 PM

Posted 03 June 2011 - 05:51 PM

Not automatically by itself.

#6 BadgerStorm

BadgerStorm
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:38 PM

Posted 03 June 2011 - 09:22 PM

Not automatically? Forgive my ignorance, what would I have had to done for that to happen?

#7 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,260 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:12:38 PM

Posted 03 June 2011 - 09:33 PM

The dropper is a Windows only program and uses Windows-specific instructions to spread itself. In order for it to do anything at all it must be on a Windows system. Playstations are not running Windows so the dropper is just a file of random binary data as far as the Playstation is concerned. The instructions in the file which cause infections are, essentially, in a language that the Playstation cannot understand, and so none of the instructions are followed.

#8 BadgerStorm

BadgerStorm
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:38 PM

Posted 03 June 2011 - 09:43 PM

Oh, at least that much worked out. My PSP was on it's last legs to begin with, I can probably buy my cousin's for pretty cheap. Thanks for the help, sorry for the stupid questions.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users