Moon Worm

[Jalfreziboy]

Hi I have a DGN2200v3 which is running on the latest firmware DGN2200v3-V1.1.00.25_1.00.25. I was glancing through the log yesterday and noticed the following entry..

Moon worm rule match] from 46.161.40.200:39663 to 84.51.188.43:32764, Sunday, May 29,2016 22:25:29

Does this mean that my router has been infected with Moon worm?

Thanks

[TheEther]

The Moon worm is malware that exploits a vulnerability on Linksys routers to gain access, install the worm and propagate itself to other Linksys routers.  Netgear is probably not affected by this vulnerability.  If anything, this log message seems to indicate that your router detected Internet traffic produced by the worm.  Hopefully, the traffic was dropped.

[Jalfreziboy]

Thanks for your reply.

I did look at the firewall rules and there is an Incoming rule for moon worm which is set Block. which would seem to suggest that my router would be ok but I am no expert in this field so thought I would ask the community.