This is a small reminder to those, especially new users to linuxboxes .
Although what is publically posted all over the net from some years ago. (2007) It has come to light that it is occuring again....
This is what was originally posted back then :
[I]SPYWHARE ONBOARD? VIRUS IN LINUX DREAMBOX ?? CHECK YOUR BOX
something is hacking the dreambox when you have port 21 open
maybe because of 1 cw that leads to 100 others and that leads to 100.000 others and so on ( it is autoexecutable + self propogating)
when they have hacked you then they upload a tarfile 4347_tool2.tar in /var and unpack it in /var/tool2 and then run a script start.sh in /var/tool2 which uses a binary called tvconnector.
But it isn't always called 4347_tool2.tar. another was named 5059_tool2.tar.
Check Your processes under system info, and You'll find several instances of "TVconnector". Kill'em.
it should not be in your dreambox
my advice is to you all check your dreambox and if you see one of thes files/directories in your box
FLASH IT
dont take any risk maybe your box is sending data about your peers ,¿¿¿maybe your box is sending data to collect as evidence against you ??? .
This is not to alarm you simply make you aware !!!
As I mentioned at the start ,this has come to light again as it was recently used to " hide" a server within another server and sent the box crazy even passing on old+ fake cards from other servers but the line wasnt visible in DCC but through CCcam info on the TV screen!!!
So ¿ how do you check if your box has this "migrant" ???? go to VAR/tool2 and system info and check for "TVCONNECTOR" then eliminate it then reflash the box..
Any information provided on this site is not guaranteed in any way. Some articles may discuss topics that are illegal, so this information is provided for educational purposes only, your use of the content, downloads and files, or any part thereof, is made solely at your own risk and responsibility. Viewing Pay TV without a valid subscription is illegal. !! Linuxsat-Support.com cannot be held responsible for the content of any information stored or posted on this forum.