[Share] [WARNING] Trojan (Presenoker) detected in ASM105xMPTool.exe firmware update tool for d4/d6-320
Posted: 17 Nov 2025, 14:19
I ran a test on this with virus total and it came back with 3 vendors detecting trojan.
Trojan.Malware.11033431.susgen
Trojan.Ghanarava.1577688974a0d8b8
PUA:Win32/Presenoker
https://www.huntress.com/threat-library ... presenoker
https://www.virustotal.com/gui/file/e0f ... 2b79906771
![Image]()

From what I can tell this is the chipsets updates (asmedia) but terra-master is distributing it here
viewtopic.php?t=7111
If anyone needs to do an update any wants to avoid trojan/spyware. Download the virtualbox. Download windows 11 eval (https://www.microsoft.com/en-in/evalcen ... enterprise). Pass through USB to the VM. Install windows. Download the updater tool. Disconnect your network. Run the firmware (virus) updater. Then blow away the VM.
Trojan.Malware.11033431.susgen
Trojan.Ghanarava.1577688974a0d8b8
PUA:Win32/Presenoker
https://www.huntress.com/threat-library ... presenoker
https://www.virustotal.com/gui/file/e0f ... 2b79906771

From what I can tell this is the chipsets updates (asmedia) but terra-master is distributing it here
viewtopic.php?t=7111
If anyone needs to do an update any wants to avoid trojan/spyware. Download the virtualbox. Download windows 11 eval (https://www.microsoft.com/en-in/evalcen ... enterprise). Pass through USB to the VM. Install windows. Download the updater tool. Disconnect your network. Run the firmware (virus) updater. Then blow away the VM.