Trojanised / Hacked Asus LiveUpdate (Armory crate?)

**SK8** · 03-26-2019 12:35 PM

I agree it is bloatware I have it turned off in bios I don't install 98% of Asus programs as I have had issues with them in the past and I don't allow much on my game rig. I did find this today.... Update - ASUS has confirmed that released a fixed version of their Live Update tool and has “implemented an enhanced end-to-end encryption mechanism” to “strengthened [their] server-to-end user software architecture”. This should prevent any similar attacks from happening in the future.

ASUS has also stated that this attack was designed to "target a very small and specific user group", which means that most users of ASUS PCs should be unaffected by the attack. Users who are concerned about their PCs should download and run ASUS' security diagnostic tool, which will check to see if their PC has been impacted by a ShadowHammer-infected version of their Live Update tool.

source.... https://www.overclock3d.net/news/sof...into_systems/1

Edit I guess this link is just for Asus laptop not on Armory crate :/

**tap002** · 03-26-2019 12:53 PM

https://rog.asus.com/forum/showthread.php?109913

**MrAgapiGC** · 03-26-2019 12:59 PM

I do not belive is the crate. The crate is just a interface that is connected to the asus webpage from the board. that is it. nothing different. I used it and files are pull down from there.

So i not the crate. The live update app also works the same. just with out the nice interface with a nice app and news, that are the same as you enter the asus rog website. I am not concern with that.

regarding the test tool ONLY apply to asus machine. Mine is not. (even that all my gear is asus) so apply ONLY for laptops.

I have check the live update for my AI suite. version 36. Or is broken as always. or is doing anything as always. At least is a update direct but if there is, i can not find it.

As read only 600 computer where target of the bunch.

**Ch3vr0n** · 03-26-2019 03:38 PM

It's blatant rootkit level malware in the bios. Mine gets disabled on every boot and they should have the balls to do it to, or remove it all together. Let the user decide if they want to use it, not push that crap through bios. A new system builder would freak out not knowing about this in the bios, and on a fresh windows install be like "WTF where did this come from, new system"

**Arne Saknussemm** · 03-26-2019 03:59 PM

If ShadowHammer breeds with Spectre we're in for it...

Whatever the damage...it's still not as bad as Corsair link or AI Suite

**SK8** · 03-27-2019 02:50 PM

Originally Posted by Ch3vr0n

It's blatant rootkit level malware in the bios. Mine gets disabled on every boot and they should have the balls to do it to, or remove it all together. Let the user decide if they want to use it, not push that crap through bios. A new system builder would freak out not knowing about this in the bios, and on a fresh windows install be like "WTF where did this come from, new system"

Fully when I first seen this in my windows I was all wtf is this crap and googled its name on another PC . I cant stand junk programs for a scrub on a PC like this . I don't install all the Asus programs as I don't use it after I got conflict from programs to come with my ROG MB's years ago . Bottom line for me I control my PCs they don't control me more so since win10 as the industry tries so very hard to turn a PC into a console .

**Telstar** · 03-27-2019 04:24 PM

Havent used it and disabled from bios

**mdzcpa** · 03-28-2019 01:12 AM

Originally Posted by Ch3vr0n

It's blatant rootkit level malware in the bios. Mine gets disabled on every boot and they should have the balls to do it to, or remove it all together. Let the user decide if they want to use it, not push that crap through bios. A new system builder would freak out not knowing about this in the bios, and on a fresh windows install be like "WTF where did this come from, new system"

You can disable the armory crate in the UEFI. No need to disable each boot.

The hack only affected Live Update.....the note book updater. Not EZ Update nor the crate. For those paranoid, just run the asus or Kaspersky tool.

The Crate is a terrible idea. I said this before. It is a well meaning feature that introduces a huge security concern. It is the first thing I disable before the OS goes in. ShadowHammer only uses the Live Update notebook app...but next time we may not be so lucky. Asus needs to do away with a UEFI level rootkit.

**SK8** · 03-28-2019 01:22 PM

MB Bios its under tools to disable it to help anyone who wants to turn it off and cant find it.

SK8 PC Specs
Motherboard	Maximus XI Extreme
Processor	Intel I9 - 9900K
Memory (part number)	DDR4 G.Skill Trident Z RGB 4266Mhz 32GB F4-4266C17Q-32GTZR
Graphics Card #1	ROG Strix OC 2080Ti
Monitor	Samsung 49" CHG90 QLED Gaming Monitor 144Hrz 1ms
Storage #1	Samsung 850 Pro X-Three-1TB
CPU Cooler	Hydro Series H150i Pro RGB 360mm Liquid CPU Cooler
Case	Corsair Obsidian Series 1000D
Power Supply	Corsair HX 1200i
Keyboard	Corsair K70
Mouse	Corsair Sabre
Headset	Sennheiser Game Zero Headset
Mouse Pad	Corsair MM800 RGB POLARIS
Headset/Speakers	Sennheiser GSX 1000 Audio Amplifier
OS	Win 10 Enterprise 64bit
Accessory #1	Logitech G13 handpad

tap002 PC Specs
Laptop (Model)	ROG Strix GL703GE-IS74
Motherboard	ASUSTeK COMPUTER INC. GL703GE
Processor	i7-8750H CPU @ 2.20GHz
Memory (part number)	16GB DDR4 2666MHz DRAM
Graphics Card #1	GTX 1050i
Storage #1	MICRON 1100_MTFDDAV256TBN

MrAgapiGC PC Specs
Motherboard	Asus Maximus XI Code
Processor	9900K
Memory (part number)	CMK32GX4M4B3600C18
Graphics Card #1	STRIX-GTX1080ti-O8G-GAMING
Monitor	AOC AGON AG2701QX (2)
Storage #1	Samsung 960 EVO 256GB
Storage #2	Kingston Savage 500GB
CPU Cooler	Nzxt X74 360mm AIO
Case	Nzxt H700
Power Supply	EVGA 850 G2
Keyboard	Logitech G810
Mouse	Asus Spartha
Headset	Hyper X Cloud Revolver S
Mouse Pad	Hyper X Fury S 900mx420mm
Headset/Speakers	Logitech Z337
OS	Windows 10 64btis
Network Router	TpLink Archer C9
Accessory #1	EKWB FANs all of them

Ch3vr0n PC Specs
Motherboard	Asus Maximus XI Formula
Processor	Core i9 9900k @ 4.7GHZ (XMP)
Memory (part number)	CMT32GX4M4Z3200C16
Graphics Card #1	Asus Strix GTX 1080 A8G
Sound Card	on board
Monitor	ASUS VG278HR & ASUS VK278Q
Storage #1	Samsung 970 Evo 1TB (Boot) & 970 EVO 2TB (Scratch)
Storage #2	3X HGST 10TB, 1x HGST 4TB
CPU Cooler	Scythe Mugen 5 PCGH
Case	Cooler Master Cosmos II
Power Supply	Corsair AX860i
Keyboard	Corsair k95 RGB Platinum
Mouse	Corsair M65Pro RGB
Headset	Corsair Voide Wireless SE
Mouse Pad	Corsair MM300 + Corsair MM800 Polaris (EU)
Headset/Speakers	Logitech Z-906
OS	Windows 10 Pro x64
Network Router	Netgear XR500
Accessory #1	Xbox One Elite Wireless Controller
Accessory #2	2X Corsair LL140, 4x Corsair LL120
Accessory #3	1x Corsair LED RGB Pro expansion kit, 2x LS100 RGB kit + 450mm expansion kit

Arne Saknussemm PC Specs
Laptop (Model)	Laptop?...No way! (Model?...Jun Amaki...yes way!)
Motherboard	ROG ZENITH II EXTREME
Processor	THREADRIPPER 3960X
Memory (part number)	TXBD48G4000HC18FBK
Graphics Card #1	GTX Titan X
Graphics Card #2	SLI is dead to me
Graphics Card #3	Tri SLI is even dead to Nvidia
Graphics Card #4	Quad SLI is dead to everybody especially my credit card
Sound Card	Xonar Essence STX
Monitor	ASUS ROG Swift PG279Q
Storage #1	Samsung 970/960/950 PRO
Storage #2	2x OCZ VERTEX 3/2x WD Caviar Black 500GB / 2x WD RED 2TB/Samsung 1TBSSDs
CPU Cooler	Custom Loop: Dual D5s, Dual Alphacool Monsta 480s, XSPC Raystorm Neo TR4, EK TitanX WaterBlock
Case	Nope!...Dimastech Easy XL...let it all hang out man!
Power Supply	Seasonic 1000 Platinum
Keyboard	Corsair Strafe MK2 ROG Claymore... or Fender Rhodes Electric Piano (MKI 73)
Mouse	Corsair M65Pro or Speedy Gonzalez...not Mickey...don't do Disney!
Headset	...firmly on neck
Mouse Pad	Mouse don't got his own pad man...lives with me
Headset/Speakers	Edifier Spinnaker...or you mean the speakers in my head...man too many voices to name them all
OS	Win XP, 7, 8, 8.1 and Windows 10 Spyware Edition
Network Router	56k modem
Accessory #1	Umm...nice tie?
Accessory #2	Err...belt?
Accessory #3	3 accessories?! I'm not a girl!!

Thread: Trojanised / Hacked Asus LiveUpdate (Armory crate?)

Thread Tools

Search Thread

Display

Posting Permissions

mdzcpa PC Specs
Motherboard	Crosshair VIII Dark Hero
Processor	5900X 4.6ghz All core 1.3V, 5ghz single DOC
Memory (part number)	Gskill NEO 3600 CAS 14 32GB (4x8)
Graphics Card #1	ROG Strix RTX 3080
Sound Card	On Board
Monitor	ROG PG348Q
Storage #1	Samsung 980 Pro M.2 512GB for OS & APPS
Storage #2	Samsung 980 Pro M.2 1TB for GAMES
CPU Cooler	ROG Ryujin 360
Case	Phanteks 500A Mesh
Power Supply	Seasonic Prime 1000W Titanium
Keyboard	Corsair K70 LUX RGB
Mouse	Corsair M65 RGB
Headset	Corsaur Virtuoso
Mouse Pad	Corsair MM300 Wide Desk Mat
OS	WIN 10 Pro
Network Router	Linksys VELOP
Accessory #1	ROG 751JY Laptop for Moobile Gaming
Accessory #2	Koolance EXC-800 Chiller
Accessory #3	25+ years of overclocking