Virus/Trojan on your SmartTV? I guess i am affected

[azer2014]

Hello all,

About week ago some internet glitches happen in my local internet. So i am try analyze what happen and found that my SmartTV local network ip address listen to 80, 443, 4443, 6000 and 9090 ports. That ports (at least 9090) widely used for Zeus C&C. So i suspect that my TV is trojaned by some hacker. I install SamyGo and did some investigation and found that above ports open by exeDSP file. And it seem that it is run from read only area. i did not install any applets from malicious source as well as i do not use SmartTV browser to surf over the net so i am still do not understand how TV can be trojaned. May be someone can give me same idea on this matter.
What i did in attempt to restore everything to genuine state:

1) Reset SmartHub
2) Removed all applets except default
3) Reset TV using menu
4) Reset TV from service menu
5) Upgrade firmware to latest.

Nothing does help.
Samsung guys tell me that they first time hear about such issue and due to fact that TV warranty period already end request me move TV to their service center. So before doing that what i could try more?
I guess i could try run own exeDSP ( i do not want patch it but at least it will be clean from trojan because i will dowload it from Samsung site). Am i on right way?
Can anyone suggest me what i could do?
My TV model is UE40ES6100, firmware were T-MST10PDEUC-1036.0 (now it is T-MST10PDEUC-2000.2, BT-G).

[zoelechat]

Surely our TVs are trojaned by Samsung itself
Port 9090 is mostly used for screen mirroring purposes, and is normally opened even if TV doesn't support it.
See I have even more ports opened, my TV has been hacked... by SamyGO!

Ports.jpg

Did you see any signs of "virus" except usually opened ports?

[azer2014]

Heh, no. Actually why i just worried in first - due to internet lags. While you got bot inside your LAN you usually could see that traffic increased (let's say that bot can sent request to some internet resourse and abuse your home router). So, i begin investigate what happen and so on so on. But i touch to Samsung support by email and also by phone and in both case they cannot confirm are this right behavior or not. Let me tell you that i install SamyGo AFTER issue detected. Before that i did install TheDark SmatTV using develop account (http://smart-tv-home.ru/) You get me calmed now:)

[zoelechat]

I don't say it cannot exist, and I wouldn't trust blindly in apps such as The Dark SmartTV, but I don't think you have to worry

[azer2014]

Thanks anyway Strange that Samsung support can't answer for simple question - what ports is listen by SmartTV with default settings...