Is it possible to have a virus stuck in the router?

After reformatting like 5+ times , i still manage to get the same virus over and over. Today i reseted the router and hopefully i won't get it back.

 

I would imagine you are getting infected due to not having a firewall enabled before your first connection to the Internet.

 

I have zonealarm on , last time i got infected was yesterday when i DLed a online game.

 

i can only remember three - TimHost.exe , WinForm.exe and cmdbcs.exe. they have dlls too.

 

TimHost.exe and WinFrom.exe are associated with an online game password stealing trojan.

http://www.sophos.com/security/analyses/trojonlinegen.html

cmdbcs.exe is also a password stealing trojan.

http://www.sophos.com/security/analyses/trojlineaggkw.html

I would suggest not downloading that game or any other game from that site again.

 

weird thing is i didn't DL anything and it just came back on itself.

 

Hi, Radiance. Welcome to Windows BBS!

I am confused. First you said you downloaded an online game. Then you said you didn't download anything. You appear (to me) to be contradicting yourself.

Can you describe/explain more clearly and/or provide more details about how/when you think the reinfection occurs?

 

Well , how can i say it the virus comes no matter what like i would do nothing and my AVG would pop up or when i'm surfing at net. Last time it happened is when i was finished DLing a online game but it doesn't happen all the time when i download the same game over once.

 

After you have reformatted "5+ times" you still manage to get the "same virus" over and over. Then, when asked about which virus, you stated

I am confused about that too since you named files that are reportedly associated with at least two different trojan malwares.

I have many questions that might help us get some details to work with.

1. After you reformatted, did you perform a fresh install of Windows or did you restore from a backup that had all your program installations and data?
   
2. Did you immediately activate your firewall and anti-virus (with latest updates) after installing Windows each time (before connecting to the Internet)?
   
3. Did you immediately use Windows Update/Microsoft Update after installing Windows to patch all the known security holes you can each time (before surfing)?
   
4. Have you secured your computer/web browser each time with applications and files such as SpywareGuard and SpywareBlaster, MVPS HOSTS, and/or IE-SPYAD, etc. (before surfing)?
   
5. Have you disabled ActiveX and Java in your web browser each time (before surfing)?
   
6. Exactly which brand and model number router do you use?
   
7. I suppose some routers might be exploited. Have you applied the latest firmware/software for your router available from the router manufacturer's web site?
   
8. Have you installed any peer-to-peer (P2P) file sharing software after installing Windows (such as LimeWire, BitTorrent, etc.)?
   
9. Exactly where did you download your online game from (when you got your last reported infection)?
   
10. Exactly which online game did you download?
    
11. What web browser (including version number) do you surf with?
    
12. What Java version do you have installed?

If you use Internet Explorer, perhaps using an alternate browser such as Firefox or Opera will help your computer stay clean.

 

1. i performed a fresh reformat where theres nothing i back up.
2. I installed AVG + ZA
3. Yes i did.
4. nope.
5. don't even have java - forgot to download that.
6. netgear mr814
7. nope. i reseted it.
8. nope.
9. from the original site.
10. Pristontale
11. Didn't install after this reformat.
12. Using firefox.

 

There are 3 versions of your wireless router described at Netgear's web site. I suggest you determine which version you have and visit the appropriate support pages.

• Determine whether you need to download and install newer firmware.
• Verify you have secured your wireless router/network from unauthorized access.

Improving Your Default NETGEAR Security

You might have a neighbor using your router (and perhaps accessing your computer). I suppose that might be a source for your infections.


EDIT: If you want assistance with securing your wireless router/network, I suggest you ask for help in the Networking Forum. (I am not very familiar with router/network configuration.)

 

ftp for sure.