Asustor Petit soucis avec DeadBolt

Drthrax74

Drthrax74

Maître Jedi
Membre Confirmé
1 Janvier 2021
556
125
118
Bonjour,

J'ai un ami qui a été infecté par le virus DeadBolt, j'ai voulu accéder à la page Backup.cgi mais apparemment elle n'existe pas.

En cherchant sur mon NAS (Sein), j'ai pas trouver.

Est ce que c'est lorsqu'on est en mode Installation ?

Code: 
root@AS5304T: sudo -i;
root@AS5304T: find / -type f -name *.cgi
/volume1/.@plugins/AppCentral/photogallery/webman/download_photogallery.cgi
/volume1/.@plugins/AppCentral/photogallery/webman/pgupload.cgi
/volume1/.@plugins/AppCentral/photogallery/webman/pgshare.cgi
/volume1/.@plugins/AppCentral/photogallery/webman/photoGallery.cgi

/volume0/usr/builtin/webman/portal/apis/index.cgi
/volume0/usr/builtin/webman/portal/apis/events.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/icon.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/photo-gallery-workaround.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/appman.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/appcentral.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/app-upload.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/start-page-loader.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/applogin.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/privilege.cgi
/volume0/usr/builtin/webman/portal/apis/appCentral/webcenter.cgi
/volume0/usr/builtin/webman/portal/apis/information/upload_cert.cgi
/volume0/usr/builtin/webman/portal/apis/information/onlineuser.cgi
/volume0/usr/builtin/webman/portal/apis/information/sysinfo.cgi
/volume0/usr/builtin/webman/portal/apis/information/log.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/importuser.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/group.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/importkey.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/cifsdrive.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/share.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/ldapclient.cgi
/volume0/usr/builtin/webman/portal/apis/accessControl/user.cgi
/volume0/usr/builtin/webman/portal/apis/admin.cgi
/volume0/usr/builtin/webman/portal/apis/settings/hardware.cgi
/volume0/usr/builtin/webman/portal/apis/settings/ezrouter.cgi
/volume0/usr/builtin/webman/portal/apis/settings/pppoe.cgi
/volume0/usr/builtin/webman/portal/apis/settings/new_adm_availability.cgi
/volume0/usr/builtin/webman/portal/apis/settings/wow.cgi
/volume0/usr/builtin/webman/portal/apis/settings/certificate.cgi
/volume0/usr/builtin/webman/portal/apis/settings/energy.cgi
/volume0/usr/builtin/webman/portal/apis/settings/ipblock.cgi
/volume0/usr/builtin/webman/portal/apis/settings/notification.cgi
/volume0/usr/builtin/webman/portal/apis/settings/general.cgi
/volume0/usr/builtin/webman/portal/apis/settings/vpnupload.cgi
/volume0/usr/builtin/webman/portal/apis/settings/defender.cgi
/volume0/usr/builtin/webman/portal/apis/settings/vpn.cgi
/volume0/usr/builtin/webman/portal/apis/settings/regional.cgi
/volume0/usr/builtin/webman/portal/apis/settings/firmwarestatus.cgi
/volume0/usr/builtin/webman/portal/apis/settings/adm_update_auto_update.cgi
/volume0/usr/builtin/webman/portal/apis/settings/geoip.cgi
/volume0/usr/builtin/webman/portal/apis/settings/recyclebin.cgi
/volume0/usr/builtin/webman/portal/apis/settings/firmwareupdate.cgi
/volume0/usr/builtin/webman/portal/apis/settings/cloudid.cgi
/volume0/usr/builtin/webman/portal/apis/settings/firewall.cgi
/volume0/usr/builtin/webman/portal/apis/settings/loginimage.cgi
/volume0/usr/builtin/webman/portal/apis/settings/ddns.cgi
/volume0/usr/builtin/webman/portal/apis/settings/iodump.cgi
/volume0/usr/builtin/webman/portal/apis/settings/network.cgi
/volume0/usr/builtin/webman/portal/apis/settings/findme.cgi
/volume0/usr/builtin/webman/portal/apis/aggrecate_js.cgi
/volume0/usr/builtin/webman/portal/apis/params.cgi
/volume0/usr/builtin/webman/portal/apis/activityMonitor/act.cgi
/volume0/usr/builtin/webman/portal/apis/activityMonitor/process.cgi
/volume0/usr/builtin/webman/portal/apis/activityMonitor/disk.cgi
/volume0/usr/builtin/webman/portal/apis/login.cgi
/volume0/usr/builtin/webman/portal/apis/fileSearch/filesearch.cgi
/volume0/usr/builtin/webman/portal/apis/userapps.cgi
/volume0/usr/builtin/webman/portal/apis/hostinfo.cgi
/volume0/usr/builtin/webman/portal/apis/register.cgi
/volume0/usr/builtin/webman/portal/apis/helpCenter/queryhelp.cgi
/volume0/usr/builtin/webman/portal/apis/taskmonitor/taskmonitor.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/thumbnail.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/volume.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/upload.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/version.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/snapshot.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/video_info.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/fileExplorer.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/image_info.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/music.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/share_link.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/download.cgi
/volume0/usr/builtin/webman/portal/apis/fileExplorer/acl.cgi
/volume0/usr/builtin/webman/portal/apis/snapshot/volsnap.cgi
/volume0/usr/builtin/webman/portal/apis/snapshot/archsnap.cgi
/volume0/usr/builtin/webman/portal/apis/snapshot/iscsisnap.cgi
/volume0/usr/builtin/webman/portal/apis/snapshot/overview.cgi
/volume0/usr/builtin/webman/portal/apis/services/rsync.cgi
/volume0/usr/builtin/webman/portal/apis/services/mysql.cgi
/volume0/usr/builtin/webman/portal/apis/services/aicontrol.cgi
/volume0/usr/builtin/webman/portal/apis/services/terminal.cgi
/volume0/usr/builtin/webman/portal/apis/services/nfs.cgi
/volume0/usr/builtin/webman/portal/apis/services/windows.cgi
/volume0/usr/builtin/webman/portal/apis/services/tftp_server.cgi
/volume0/usr/builtin/webman/portal/apis/services/snmp.cgi
/volume0/usr/builtin/webman/portal/apis/services/mac.cgi
/volume0/usr/builtin/webman/portal/apis/services/http.cgi
/volume0/usr/builtin/webman/portal/apis/services/proxy.cgi
/volume0/usr/builtin/webman/portal/apis/services/ftp.cgi
/volume0/usr/builtin/webman/portal/apis/services/sftp.cgi
/volume0/usr/builtin/webman/portal/apis/external/extdisk.cgi
/volume0/usr/builtin/webman/portal/apis/external/optical_drive.cgi
/volume0/usr/builtin/webman/portal/apis/external/wifi.cgi
/volume0/usr/builtin/webman/portal/apis/external/printer.cgi
/volume0/usr/builtin/webman/portal/apis/external/bluetooth.cgi
/volume0/usr/builtin/webman/portal/apis/external/extups.cgi
/volume0/usr/builtin/webman/portal/apis/thumbnail/upload.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/rsyncclient.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/amzs3.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/ftpbackup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/pushbkup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/extbackup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/syssetbackup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/ezsync_upload.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/ezsync.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/internalbackup.cgi
/volume0/usr/builtin/webman/portal/apis/wallpaper/wallpaper.cgi
/volume0/usr/builtin/webman/portal/apis/wallpaper/downloadwallpaper.cgi
/volume0/usr/builtin/webman/portal/apis/wallpaper/uploadwallpaper.cgi
/volume0/usr/builtin/webman/portal/apis/storageManager/volume.cgi
/volume0/usr/builtin/webman/portal/apis/storageManager/iscsi.cgi
/volume0/usr/builtin/webman/portal/apis/storageManager/disk_smart.cgi
/volume0/usr/builtin/webman/portal/apis/storageManager/diskbox.cgi
/volume0/usr/builtin/webman/portal/apis/storageManager/archive.cgi
/volume0/usr/builtin/webman/portal/apis/storageManager/disk.cgi
/volume0/usr/builtin/webman/portal/apis/desktop.cgi
/volume0/usr/builtin/webman/portal/index.cgi
/usr/dummy.builtin/webman/portal/index.cgi

Code: 
/usr/webman/index.cgi
/usr/webman/initial/sysreset.cgi
/usr/webman/initial/firmwarestatus.cgi
/usr/webman/initial/index.cgi
/usr/webman/initial/firmwareupdate.cgi
/usr/webman/initial/initial.cgi



Code: 
root@AS5304T: find / -type f -name *.cgi |grep backup;

/volume0/usr/builtin/webman/portal/apis/backupRestore/rsyncclient.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/amzs3.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/ftpbackup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/pushbkup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/extbackup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/syssetbackup.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/ezsync_upload.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/ezsync.cgi
/volume0/usr/builtin/webman/portal/apis/backupRestore/internalbackup.cgi
 
Dernière édition:
Bonsoir,

Je ne comprends pas bien la question. Si il est infecté, a t'il suivi la procédure donné par Asustor via DAMI1?
 
Bonjour,

La page backup.cgi n'existe pas dans mon cas et j'ai mis dans le topic le liste des fichiers présent sur le NAS en *.cgi.
 
Vous devez vous connecter ou vous enregistrer pour répondre ici.
Haut Bas