Thanks for the speedy info.

The guys on dd-wrt reckon you may be OK if you implemented strong password.
Maybe add a the relevant IP/DNS to a blacklist & remove all tools to download code, like wget, "busybox ftpget" & tftp.
Disable ssh & access from outside (besides via VPN).

http://www.dd-wrt.com/phpBB2/viewtopic.php?t=49370&highlight=psyb0t

I expect we'll see a patch soon (considering how soon a patch cam out after the "Kaminski bug")

- J


> From: wlug-request@list.waikato.ac.nz
> Subject: wlug Digest, Vol 213, Issue 16
> To: wlug@list.waikato.ac.nz
> Date: Fri, 27 Mar 2009 12:00:08 +1300
>
> Send wlug mailing list submissions to
> wlug@list.waikato.ac.nz
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://list.waikato.ac.nz/mailman/listinfo/wlug
> or, via email, send a message with subject or body 'help' to
> wlug-request@list.waikato.ac.nz
>
> You can reach the person managing the list at
> wlug-owner@list.waikato.ac.nz
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of wlug digest..."
>
>
> Today's Topics:
>
> 1. Worm Targets Linux Routers (James Pluck)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 27 Mar 2009 11:36:16 +1300
> From: James Pluck <papabearnz@gmail.com>
> Subject: [wlug] Worm Targets Linux Routers
> To: Waikato Linux Users Group <wlug@list.waikato.ac.nz>
> Message-ID: <49CC0360.2050701@gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> This looks a little upsetting...
>
> http://www.bit-tech.net/news/bits/2009/03/26/worm-targets-linux-routers/1?tcs=nl
>
>
> J
>
>
> ------------------------------
>
> _______________________________________________
> wlug mailing list
> wlug@list.waikato.ac.nz
> http://list.waikato.ac.nz/mailman/listinfo/wlug
>
>
> End of wlug Digest, Vol 213, Issue 16
> *************************************

---

Let MSN NZ Money help you recover. Got a 2008 financial hangover?