unable to acess Spark HG659b router web page

Forums › Spark New Zealand (including Skinny and BigPipe) › unable to acess Spark HG659b router web page

Davoid

142 posts

Master Geek

Lifetime subscriber

#272005 5-Jun-2020 10:23

Hello,

As of this morning, I cannot open my Spark router (HG659b) web page as Bitdefender now blocks it with the following message.

"http://192.168.1.254/atpscriptall_/lang/en/device_info_res.js/lang/en/user_login_res.js/lang/en/wizard_res.js/lib/base64.js/js/user_login.js?HG659bHG659bV100R001C227B0221234567890 Threat name: JS:Trojan.Cryxos.391"

The Router home page has this listed "Missing translation: UserLogin.GateWay_info"

Can anyone give me advice on this or how to remove if it is a threat?

It was working fine yesterday and I have run virus scan with Bitdefender, but came back okay.

Thanks,

David

Lias

5590 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2499172 5-Jun-2020 16:08

Paging @hio77

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2499213 5-Jun-2020 18:13

Heya,

Can you confirm for me exactly the version of Bitdefender you have?

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Davoid

142 posts

Master Geek

Lifetime subscriber

#2499359 6-Jun-2020 05:31

Hello hio77,

The version I use is Internet Security 2020 build 24.

thanks,

David

Gordy7

1906 posts

Uber Geek

ID Verified

Lifetime subscriber

#2499360 6-Jun-2020 07:04

Maybe this is it... A search on Trojan.Cryxos.391 brings up:

These trojans are essentially part of a 'call support' or 'tech support' scam ??

https://www.f-secure.com/v-descs/trojan_js_cryxos.shtml

Gordy

My first ever AM radio network connection was with a 1MHz AM crystal(OA91) radio receiver.

Davoid

142 posts

Master Geek

Lifetime subscriber

#2499691 6-Jun-2020 15:44

Thanks for this Gordy, but I am not getting a popup, just cannot load the router homepage and Bitdefender does not give me any option to delete or quarantine.

Gordy7

1906 posts

Uber Geek

ID Verified

Lifetime subscriber

#2499697 6-Jun-2020 16:00

Davoid:

Thanks for this Gordy, but I am not getting a popup, just cannot load the router homepage and Bitdefender does not give me any option to delete or quarantine.

I had a problem a while back with not being able to log into my HG659 admin web page.

It was not a virus/trojan issue like you are reporting.

I had been playing about with DMZ or forwarding.

I figured that maybe the HG659 admin access was locked out in that situation to prevent someone messing with the HG659 after gaining external access to the LAN.

Problem was solved by a hard reset of the HG659 and re-installing the firmware. (one or both of these... can't remember exactly :-)

Gordy

My first ever AM radio network connection was with a 1MHz AM crystal(OA91) radio receiver.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2499698 6-Jun-2020 16:06

Gordy7:

Maybe this is it... A search on Trojan.Cryxos.391 brings up:

These trojans are essentially part of a 'call support' or 'tech support' scam ??

https://www.f-secure.com/v-descs/trojan_js_cryxos.shtml

Yes, I wonder if it's a false positive or an infected device, but reviewing here.

I've not seen any reports through the channels yet.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

richms

28218 posts

Uber Geek

Trusted

Lifetime subscriber

#2499722 6-Jun-2020 16:48

Can you access the router on another device without bit defender on it?

Richard rich.ms

Davoid

142 posts

Master Geek

Lifetime subscriber

#2499968 7-Jun-2020 07:54

Thank you all for all your help.

Richms I just tried using my Samsung tablet and was able to log into the router home page no problem. Does this mean it is a false positive from Bitdefender?

Davoid

142 posts

Master Geek

Lifetime subscriber

#2499970 7-Jun-2020 08:18

Okay, have just completely uninstalled Bitdefender and can now access the router page without problems.