Avast WEBforum

Other => General Topics => Topic started by: zone12 on November 17, 2008, 03:40:42 AM

Title: Telus router box infected?!
Post by: zone12 on November 17, 2008, 03:40:42 AM
My telus D-link box thing Says that it may be infected with a blaster type vrius because of muiltipult connections?
I have 3 computers wired up but that shouldnt cause it. on the other 2 it doesn't show this. It recomends me to scan it but I don't know how.
Title: Re: Telus router box infected?!
Post by: ardvark on November 17, 2008, 06:42:06 AM
My telus D-link box thing Says that it may be infected with a blaster type vrius because of muiltipult connections?
I have 3 computers wired up but that shouldnt cause it. on the other 2 it doesn't show this. It recomends me to scan it but I don't know how.

Hi...

I'm getting conflicting information as to whether this is even possible and I don't know of any software that exists to scan routers. This post from "Fred Lurk" on whirlpool.net.au has information on how to rule out the router as being a "suspect"....

"Here's one possible way to rule out the router: format the HDD again (wipe the BIOS while you're at it) & remove the telephone connector from the ADSL modem. OK, you won't have any internet for a while, but if it doesn't come back in a few days it should rule out the external hardware. I've got a virus on this PC that AVG can't heal (it's just about to get formatted too), low level thing that doesn't seem to affect much & this PC has no critical stuff on it. The other PC on the network is unaffected."

I'm not sure what else to suggest here. :(

Best Regards...
Title: Re: Telus router box infected?!
Post by: Lisandro on November 17, 2008, 09:44:10 PM
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! (http://www.freedrweb.com/cureit/) instead.
3. Use SUPERantispyware (http://www.superantispyware.com), MBAM (http://malwarebytes.org/mbam.php) or Spyware Terminator (http://www.spywareterminator.com/) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
4. Test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest avast! antirootkit (http://files.avast.com/files/beta/aswar.exe) or Trend Micro RootkitBuster (http://www.trendmicro.com/download/rbuster.asp).
5. Make a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here or this analysis site (http://www.hijackthis.de/#anl). Or even submit the RunScanner (http://www.runscanner.net/) log to to on-line analysis.
6. Disable System Restore and then reenable it again.
7. Immunize your system with SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html) or Windows Advanced Care (http://www.iobit.com/AdvancedWindowsCarePersonal/index.html).
8. Check if you have insecure applications with Secunia Software Inspector (http://secunia.com/software_inspector/).