RT-AC68U new firmware 3.0.0.4.384_20624-g14d2f02

[monaro-ds]

i hope so ... but for now TrendMicro also added it to the list as "Suspicious"

 

[monaro-ds]

i hope so ... but for now TrendMicro also added it to the list as "Suspicious"

TrendMicro update it from "Suspicious" to Trojan... may be Assus need to look in to it

 

[KevTech]

TrendMicro update it from "Suspicious" to Trojan... may be Assus need to look in to it

It is not even an executable file.

Like was already said it is a false positive.

VirusTotal result with Symantec and TrendMicro on the "clean" list.

https://www.virustotal.com/#/file/0...038dfaebdd09a91f1e57de45d2ac55a97c6/detection

 

[Grisu]

It is not even an executable file.

Like was already said it is a false positive.

VirusTotal result with Symantec and TrendMicro on the "clean" list.

https://www.virustotal.com/#/file/0...038dfaebdd09a91f1e57de45d2ac55a97c6/detection

Dont check the trx, first unzip (7zip) it and you will get 2 alarms from Win-defender, this 2 files you can updload and check again.
Thats what @monaro-ds has done!

 

[KevTech]

A

Dont check the trx, first unzip (7zip) it and you will get 2 alarms from Win-defender, this 2 files you can updload and check again.
Thats what @monaro-ds has done!

I see what you are saying but it is still a false positive.

Trend and all other AV gives both clean result at metascan.

https://metadefender.opswat.com/res...5YVdxWGYzY3pTMV94aVJWZjNjRw/regular/multiscan

https://metadefender.opswat.com/res...eU4yZkRHaDVHSEp4TmhmUEduY2Y/regular/multiscan

Bitdefender is one of the best AV you can buy and it says both files are clean at Metascan and Virustotal as does Qihoo-360 which uses three AV engines (360 QVMII AI Engine, Avira and Bitdefender).

I use Kaspersky which is another top AV and it says both are clean as well as the whole sbin folder.

 

[monaro-ds]

Kaspersky was good 5 years ago ...
It sure can be false positive, but why update from Suspicious to Trojan... if it was false positive

it's a fist prompt i got on my computer in 2+ years

 

[wouterv]

No virus warnings here on W10 and Windows Defender.
Maybe the false alarm gets triggered by 7Zip?
I dropped external un-zippers years ago due to the native support of it by Windows.

Still wondering about the two firmware releases within 2 days:

1. FW_RT-AC68U_300438420624.zip
   
2. FW_RT_AC68U_300438420624.zip

A minor - to _ change in the zip file name and binary differences in the .trx files.
Both versions appear the same after installation.
For at least the latest version the checksum validated, the earlier I did not check.
One annoying thing is the AiMesh popup after login.

 

[Grisu]

No virus warnings here on W10 and Windows Defender.
Maybe the false alarm gets triggered by 7Zip?
I dropped external un-zippers years ago due to the native support of it by Windows.

Still wondering about the two firmware releases within 2 days:

1. FW_RT-AC68U_300438420624.zip
   
2. FW_RT_AC68U_300438420624.zip

A minor - to _ change in the zip file name and binary differences in the .trx files.
Both versions appear the same after installation.
For at least the latest version the checksum validated, the earlier I did not check.
One annoying thing is the AiMesh popup after login.

How do you unzip a trx with windows?
7zip cant trigger any alarms, only the file coming out of it after decompression!
And there are so many other formats than zip Win10 cannot open, you compare apples with pears, fine you dont have need for something else, most others have to.

Kaspersky was good 5 years ago ...
It sure can be false positive, but why update from Suspicious to Trojan... if it was false positive

it's a fist prompt i got on my computer in 2+ years

Maybe because some of us here tested it and so they got more than usual requests for this file to increase alarm level.

 

[KevTech]

No virus warnings here on W10 and Windows Defender.
Maybe the false alarm gets triggered by 7Zip?

What @monaro-ds is referring to is if you extract the contents of the trx using 7-zip.

What I find funny is on virustotal you have TrendMicro and TrendMicro Housecall saying there is a trojan but on metascan they both say nt_actmail is clean.

https://www.virustotal.com/#/file/e...088c3920b23ebfb898c3266aa65def2fcbb/detection

https://metadefender.opswat.com/res...5YVdxWGYzY3pTMV94aVJWZjNjRw/regular/multiscan

As for nt_center you have ONLY windows defender that thinks this file is bad out of 58 scanners.

Who do you think is wrong?

https://www.virustotal.com/#/file/2...bf7cc0cacf9ff86fbe907af2b837a1eaa65/detection

EDIT: OK @monaro-ds try this.

Download the latest @RMerlin firmware 384.4.2 and try the same thing: https://sourceforge.net/projects/asuswrt-merlin/files/RT-AC68U/Release/

My results were that the only scanner that detected anything was Windows Defender.

So once again who do you think is wrong?

https://www.virustotal.com/#/file/a...dc6e7727e8e3a95f3e4a19dad97dfbd5feb/detection

https://www.virustotal.com/#/file/2...bf7cc0cacf9ff86fbe907af2b837a1eaa65/detection

 

[monaro-ds]

or its new and others don't have good code for it yet ...
By the time I checked your links they have 4 hits on each .
and the first now up to 6
https://www.virustotal.com/#/file/e...088c3920b23ebfb898c3266aa65def2fcbb/detection

 

[monaro-ds]

opswat is now showing " Threats Found" too
and virustotal count is up to 9

 

[Grisu]

now up to 10, the list is still increasing, even McAffee is on the list now !!!
https://www.virustotal.com/#/file/e...088c3920b23ebfb898c3266aa65def2fcbb/detection

seems MS-defender isnt that bad as all say, they've been first of all ...
at least if it still fails, others are doing same way!

AND it is correctly identified as linux-file, not x86 or x64 file!

In my opinion with almost no knowledge thats at least very bad programming if it is meant to be save for us.

Update: still 10 but Microsoft has gone for Sophos AV. That all makes no sense for me with daily changes.

 

[Wayne]

There is a new firmware

3.0.0.4.384_20648-g21e3702

Check it Out!

 

[visortgw]

There is a new firmware

3.0.0.4.384_20648-g21e3702

Check it Out!

For which device(s)? Is there any change log available? I am not seeing a download URL.

 

[overClocked!]

There is a new firmware

3.0.0.4.384_20648-g21e3702

Check it Out!

Interesting. It's not published to the ASUS website yet, but it shows up when you "check update" from the router. So not sure what this one addresses.

I see it for RT-AC1900P.


Sent from my iPhone using Tapatalk

 

[Adam]

Is there any change Log?

 

[visortgw]

Interesting. It's not published to the ASUS website yet, but it shows up when you "check update" from the router. So not sure what this one addresses.

I see it for RT-AC1900P.

Using the .20624 URL on the ASUS support website, I deduced a download URL for the RT-AC68U to be http://dlcdnet.asus.com/pub/ASUS/wireless/RT-AC68U/FW_RT_AC68U_300438420648.ZIP. There is no change log associated with the build contained in the zip archive.

 

[overClocked!]

Using the .20624 URL on the ASUS support website, I deduced a download URL for the RT-AC68U to be http://dlcdnet.asus.com/pub/ASUS/wireless/RT-AC68U/FW_RT_AC68U_300438420648.ZIP. There is no change log associated with the build contained in the zip archive.

Nice work. I would like to see a change log before I download anything, though.


Sent from my iPhone using Tapatalk

 

[Grisu]

Is there any change Log?

You can have a look for your own, just search for new firmware "check update" and instead of update click in the next line on the file/version-name, it will show change-log.
Afterwards you can still decide to update or leave it.

Firmware version 3.0.0.4.384_20648
- Release Note -

Bug fixed and Enhancements:
- Fixed abnormal message in system log.
- Fixed Time zone/DST bugs.
- Enhanced AiMesh self-healing ability.
- Fixed AiMesh mac filter bugs

 

[OzarkEdge]

And again, updating a 68U node leaves the 86U router with a flashing !. Rebooting the 86U router clears the flashing !.

OE