its anything after Gemini 4.30 thats the problem
This is correct and I beleive there is software to remove it availible somewhere.
Also point to not, the virus in gemini looks at mac address of the clones. Before they didnt come out with same macs as Dream media. But recently all my chinese clones I've got have had same mac and some reported New gemini working ok on them. Personally I would never trust a gemini image ever again...stick with the best and use DW.
How the gemini atacked and how to config mac address
Ok managed to find how attack started, they traced MAC address in boxes . this includes eagle box / dvb /dm500 china/extremebox etc. and the boxes have similar mac address all start with 00:12:25:xx:xx:xx this mac address is for motorola company and genuine Dreambox mac address is 00:09:34:xx:xx:Xx owned by dreamultimedia , so with this information i will pass on you will be able to convert your mac address to original dreamultimedia mac address by doing the following information
Create init File with another mack .using NOTEPAD, then copy this text
inside notepad file
ifconfig eth0 down ; ifconfig eth0 hw ether 00:48:21:0A:33:26 ; ifconfig eth0 up
And save this file with name in .init .then with program dcc2.94 using ftp mode save this init file on dreambox var/etc folder
then login again to dreambox in telnet mode and click Format option, the write this:
ifconfig eth0 down ; ifconfig eth0 hw ether 00:09:34:xx:xx:xx ; ifconfig eth0 up
This xx xx xx you can put something else. after doing this click enter. and then for testing on new mac address just type ifconfig.
To check if your mac address box is genuine just login to box via telnet and type cat /proc/bus/dreambox
this should tell you information about box.
if mac start with 00:12:25 then box is fake dream
if mac start with 00:09:34 then box is genuine dream
if eagle star mac with 00:12:25 it means is still genuine eagle box and ok but not recognised at genuine by dreambox. in fact they are 2 diferent models not related but compatible with same images.
c&p,thanks goes to Calhordas