As many as 3,000 HTC Magic phones sold in Spain were discovered to be pre-infected with the Mariposa botnet, Conficker worm, and a password stealer.