admin password reseted everytime

RouterOS General
1

Hello,

We have a problem with the admin password.

For several days ago, the admin password is reseted to blank every few minutes. And all the users that had been created are deleted.

What’s the problem? has my router a malware script? has been my router unlocked from external attacks?

I need a little help from you.

Thanks.

2

Good post, you have specified RouterOS version and RouterBoard model with [BIOS] firmware used.

Excellent works, this surely help who try to help you.

3

Jajajaja, you’re right

sorry :frowning:

My Routerboard is a CCR 1036 with Firmware 3.10 and Routeros 6.13.

Thanks for reply.

4

I do not have that specific model, but I suggest to save

/export compact file=mybackup

and if you have user-manager:

/tool user data save file=mydb

and backup all file on “files”

then use netinstall 6.14 to clean install routeros-tile-6.14.npk

after that update bios on system / routerboard

reboot again

at this point open on “notepad” mybackup.rsc and import back on terminal section by section, not all together, for see if any errors (surely on sntp) and fix them.

at this point bring back the mydb.db saved (and all the other file, like hotspot html, etc.) and import again on usermanager with:

/tool user data load file=mydb
and after that
/tool user data rebuild

reboot the device

add again the users and see if disappear again.

5

Ok, I’ll try it.

Thanks again.

6

Hi, I’m having the same issue. CCR1009 running 6.15. Did doing the above fix the problem? My admin password is reset to nothing every minute, and any users I create in that minute are deleted as well. I’m not using user-manager. Thanks!

7

try

obviously fix the line: then use netinstall 6.15 to clean install routeros-tile-6.15.npk

8

Thanks. Does anybody know if this is a bug in the ROS, or a some sort of malware script?

9

I think is one bug on upgrade from previous version to current.

I never see one malware for mikrotik board, you can not install any 3rd party software (except openflow) directly inside routerboard.

10

Here is another thread with similar symptoms.
http://forum.mikrotik.com/t/ccr-problem-users-lost-cant-do-anything/78677/5

11

You mean install into routeros not into routerboard, don’t you?

12

Yes, you are right, I mean “inside” RouterOS. :smiley:

13

It’s another incident of the tile NAND bug, 6.16 supposedly is the fix for this.