PDA

Bekijk de volledige versie : VIRUS --Trojan.Lootseek.AV --SAMBA--



PB_LIST
25-10-2006, 00:10
Hi, I have an ASUS WL-500g with SAMBA SSH and SW-1.9.2.7-7e.

In my samba share 2 files keep appearing:


-rwxr--r-- 1 root root 43 Oct 24 17:56 autorun.inf
-rwxr--r-- 1 root root 40960 Oct 24 17:58 setup.exe

My antivirus identifies setup.exe has Trojan.Lootseek.AV.
After I also got Backdoor.DMSpammer in a file 12exmodul32e.f.exe that was downloaded to my computer.

The virus seams to be in the router SW because I delete the files using SSH and they appear again.(without any samba connection active).

Has anyone seen this problem?

How can I clean this from the router? Is this the Only backdoor for this SW
:confused: :rolleyes:

BR
PB_LIST

PB_LIST
27-10-2006, 00:06
nobody with the same problem?

max2950
09-11-2006, 08:40
I do not think that the router is infected with the virus.

Your computer might be infected and the virus propagates through your local network. Since the router is seen as a PC because of samba, the virus replicates itself to it. However there is no risk that your router gets infected since the virus is a windows virus.

PB_LIST
10-11-2006, 01:01
The problem was not my pc was the firewall wide open... :-(