VIRUS --Trojan.Lootseek.AV --SAMBA--

[PB_LIST]

Hi, I have an ASUS WL-500g with SAMBA SSH and SW-1.9.2.7-7e.

In my samba share 2 files keep appearing:


-rwxr--r-- 1 root root 43 Oct 24 17:56 autorun.inf
-rwxr--r-- 1 root root 40960 Oct 24 17:58 setup.exe

My antivirus identifies setup.exe has Trojan.Lootseek.AV.
After I also got Backdoor.DMSpammer in a file 12exmodul32e.f.exe that was downloaded to my computer.

The virus seams to be in the router SW because I delete the files using SSH and they appear again.(without any samba connection active).

Has anyone seen this problem?

How can I clean this from the router? Is this the Only backdoor for this SW
:confused: :rolleyes:

BR
PB_LIST

[PB_LIST]

nobody with the same problem?

[max2950]

I do not think that the router is infected with the virus.

Your computer might be infected and the virus propagates through your local network. Since the router is seen as a PC because of samba, the virus replicates itself to it. However there is no risk that your router gets infected since the virus is a windows virus.

[PB_LIST]

The problem was not my pc was the firewall wide open... :-(