Page 1 of 1

[Share] [WARNING] Trojan (Presenoker) detected in ASM105xMPTool.exe firmware update tool for d4/d6-320

Posted: 17 Nov 2025, 14:19
by randomroger
I ran a test on this with virus total and it came back with 3 vendors detecting trojan.

Trojan.Malware.11033431.susgen
Trojan.Ghanarava.1577688974a0d8b8
PUA:Win32/Presenoker
https://www.huntress.com/threat-library ... presenoker

https://www.virustotal.com/gui/file/e0f ... 2b79906771

Image
Image

From what I can tell this is the chipsets updates (asmedia) but terra-master is distributing it here
viewtopic.php?t=7111

If anyone needs to do an update any wants to avoid trojan/spyware. Download the virtualbox. Download windows 11 eval (https://www.microsoft.com/en-in/evalcen ... enterprise). Pass through USB to the VM. Install windows. Download the updater tool. Disconnect your network. Run the firmware (virus) updater. Then blow away the VM.