IBM is expressing regret for doling out USB drives at a security convention in Australia last week, which had malware on them.

The thumb drives were handed out to people for free who came up to the IBM booth at the AusCERT symposium.

Chief Technologist at IBM Australia, Glenn Wightwick, wrote in a letter to AusCERT Delegates, which was reprinted on the Beast or Buddha blog, "Unfortunately we have discovered that some of these USB keys contained malware and we suspect that all USB keys may be affected".

The letter said that the malware is discovered by most of the present Anti Virus products as at 20/05/2010 and been identified since 2008.

It said that the malware is acknowledged by several names and is included in the setup. exe and autorun. ini files. It widens when the tainted USB device is placed in into a Microsoft Windows terminal or server whereby the setup. exe and autorun. ini files run automatically.

The letter goes on to offer measures for eliminating the malware; switch off system reinstate, upgrade antivirus software, execute a scan utilizing a second antivirus good, and create a back up for all essential files on the system before re-storing the operating system "as a precautionary measure".