logo elektroda
logo elektroda
X
logo elektroda

Huawei B535-333 Router Firmware Download and Virus Concerns

rsceakb303 2082 7
ADVERTISEMENT
  • #1 21377848
    rsceakb303
    Level 2  
    How to download original firmware huawei B535-333
    There are rumors that the modem is modified and infected with a virus, and the modem is aggressively sending and trying to read computer data.
    AI: What is the current firmware version installed on your Huawei B535-333 router?
    11.0.2.51(H380SP2C21)
    AI: Why do you need to download the original firmware for your router? Are you experiencing any specific issues?
    Suspicions that the written software is infected.
  • ADVERTISEMENT
  • Helpful post
    #2 21378474
    IC_Current
    Network and Internet specialist
    rsceakb303 wrote:
    the modem is aggressively sending and trying to read data from the computer
    .
    Have you used Wireshark and checked in person, or is it just rumours and clicks on Spam-Tube
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #3 21379424
    rsceakb303
    Level 2  
    I have been using this modem for about 3 years, it always worked very well until I changed the firmware to CUSTOM, after changing the firmware I constantly receive messages on the computer about ARP poisoning attack and duplicate IP addresses on the network when these messages end and it is about 50-60 then it starts the system displays NetBIOS attack and messages are repeated many times, the system repeats 50-60 times until it blocks the network because the modem sends harmful actions.
    ESET Smart Security Premium and Malwarebytes AntiMalware Premium messages about modem actions are similar.
  • ADVERTISEMENT
  • Helpful post
    #4 21379467
    IC_Current
    Network and Internet specialist
    rsceakb303 wrote:
    until I changed the firmware to CUSTOM
    .
    Now I understand. You just uploaded something of unconscious origin yourself.
    rsceakb303 wrote:
    on a computer with an ARP poisoning attack and duplicate IP addresses
    .
    It's just that this attack as performed by the router has no purpose at all. Why redirect network traffic to itself using ARP, when being a gateway this traffic would have gone there anyway. So either the ARP attack is coming from another device, or it is the result of a software bug and not a deliberate action.
    As for firmware - realistically very difficult to find. Adding to the problem, because by uploading firmware without additionally a suitable web server overlay under the firmware, people could not log in afterwards. Firmware and web overlay are interrelated.
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #5 21379578
    rsceakb303
    Level 2  
    >>21379467 I have this version:
    https://androidfilehost.com/?fid=14655340768118477843

    Do you have the competence to analyze this file?

    My friend with b535-232 entered CUSTOM and he can no longer access the modem administration, I know this problem.
    I found CUSTOM because of DNS, because the equipment provided by the Internet provider was disabled with the ability to change DNS, after rewriting the firmware everything works fine now, but I'm worried about the infected network, guests or personal equipment in such a network may be unsafe, so you need to change the equipment for your own and other security, information on the phones (guests, relatives' phones). Or you need to make sure that this software is really not infected with viruses.>>21379467
  • Helpful post
    #6 21379749
    IC_Current
    Network and Internet specialist
    rsceakb303 wrote:
    are you competent to analyse this file?
    .
    Unfortunately no.

    But you can install Wireshark on your computer and see in it what is flying around the network and what that router is trying to do on the network.

    rsceakb303 wrote:
    b535-232
    .
    In Poland, such a second-hand router costs less than £25, so apart from hobbyist fun for the sake of learning, nobody is likely to waste time changing firmware.
    The 535-333 version is £50, so it's also a waste of time.
    Better to sell the unit for a few $$$, add $ and have a 628-350 with 3CA aggregation for £90.
    Helpful post? Buy me a coffee.
  • #7 21381148
    rsceakb303
    Level 2  
    Well, I'm thinking about the ZTE MC889A (Advanced) hardware, I live in a private house. I was also thinking maybe it's worth buying the software from easy-firmware.com for 1.5€, I'll try using Wireshark out of curiosity :) my "computer" skills won't help me with it. Can you please direct me to the proper place to download Wireshark?

    Another question, can these problems occur due to custom firmware and the expired hirouter (CERT DATE INVALID) certificate in it?
  • #8 21381239
    KOCUREK1970
    Network and Internet specialist
    @rsceakb303
    We only download original software, which comes from the original device manufacturer's website.
    No other action is possible.

    Problems begin when we search for software on our own on various websites, from unknown sources.
    That's asking for trouble.

Topic summary

The discussion revolves around downloading the original firmware for the Huawei B535-333 router due to concerns about potential malware after installing a custom firmware. Users report issues such as ARP poisoning attacks and duplicate IP addresses, which they suspect are caused by the modified firmware. Recommendations include using Wireshark to analyze network traffic and the importance of sourcing firmware from official manufacturer websites to avoid security risks. Some participants suggest considering alternative routers like the ZTE MC889A for better performance and security.
Summary generated by the language model.
ADVERTISEMENT