Confirmed!
Found it a couple of days ago on my box. But it isn't allways called 4347_tool2.tar. Mine was named 5059_tool2.tar.
Check Your processes under system info, and You'll find several instances of "TVconnector". Kill'em.
My router-log showed data was transmitted to blog.balderberg.org and faderhuset.org (check url's in file).
danskfront.dk is also mentioned in url's, but I didn't see any data transmissions to that.
faderhuset is a religious sect.
danskfront is an extreme organisation (nazi tendensies) with relations to "Blood and Honour" and "Combat 18".
I'm sorry I didn't warn You 'bout it, but going trough the files indicated it was targeting ordinary linux servers, and since it connected to danish url's, I believed it just accidential hit my dreambox.
Found it a couple of days ago on my box. But it isn't allways called 4347_tool2.tar. Mine was named 5059_tool2.tar.
Check Your processes under system info, and You'll find several instances of "TVconnector". Kill'em.
My router-log showed data was transmitted to blog.balderberg.org and faderhuset.org (check url's in file).
danskfront.dk is also mentioned in url's, but I didn't see any data transmissions to that.
faderhuset is a religious sect.
danskfront is an extreme organisation (nazi tendensies) with relations to "Blood and Honour" and "Combat 18".
I'm sorry I didn't warn You 'bout it, but going trough the files indicated it was targeting ordinary linux servers, and since it connected to danish url's, I believed it just accidential hit my dreambox.