Admin pass changed

I need script to do somethig when admin password is changed

I don’t know how to do that but i’m really curious to why you need it.

Few days ago somebody loged into my box changed admin pass and disabled all interfaces in ap-bridge mode. Only thing I could do is to reinstall MT. Later I mounted MT in linux and found what happened. I could read log file but I couldn’t change admin pass. Therefore I need script.

What happened then? Is there a security flaw we need to worry about?
And what would stop this from happening again and this time they would disable the script?

No, you don’nt need to worry about, because I think that password was stolen by some kind of keyloger or something similar.