After upgrade firmware 6.40.5, Can't change admin's group to full

RouterOS General
1

In the Users section, It has another account “sys” which is set to group “full”
Anyone here knows the password of “sys” account , please tell me. So I will change the group of “admin” to “full”

Thanks

2

There is no sys account in RouterOS by default. It is created by some of the router admins.

3

Check and this
http://forum.mikrotik.com/t/possible-security-breach/106774/5

4

You mean I got hack

Even terminal in Winbox can’t open
It said about permision

5

Sounds like the router has been compromised and you’ve been locked out of it.

6

Guys … how many times must we write this.

  1. Change “admin” to some other username
  2. SET A PASSWORD
  3. USE FIREWALL
7

Do you have an export of your configuration so you can import it to router after you make a Netinstall?
https://wiki.mikrotik.com/wiki/Manual:Netinstall

8

There will be no end to people that can perform a basic setup with no concept of security.

Perhaps a feature request to consider: blank or default passwords cause the unit to beep loudly and frequently until the defaults are changed.

Perhaps a default behavior where the router stops accepting traffic after a short period of time while default credentials exist. IMHO, I wouldn’t care if the administrator loses access and has to reboot the router to regain access. That’s an administrator that hasn’t learned that default passwords are dangerous.

For those admins that decide they’ll change the password to something equally stupid like “root” or “password”, the failure when those routers are hacked will be gross negligence, rather than just ignorance of the administrator.

9

First of all I had changed admin password but hadn’t changed user “admin” to other user. I try to hard and soft reset but it didn’t work. Now my router restarts periodically and found it has run script every second( I check on the scheduler) this makes router last about 20 minutes.

Some advices me to use netinstall. I will try it today.
After I gain full access of my router again I will consider to setup a firewall and change username.

Thanks

10

Unfortunately, I can’t do anything, just see script, but have no idea what this hacker’s script do
Can someone understand it?

11

It might help if you posted all the script in text form rather than a stupid screenshot.

12

Have you resolved your issue?
If not yet, what actions are you able to do with your device?

13

I can’t do anything just say RIP to this Router

14

You posted the screenshot from there above, so do you have any access to the router? Or you had it once and have lost finally?

15

For now I can still access with my “admin” account with limited priviledges. I can only see but can’t config anything. I tried to copy script to *.txt file but it can’t copy to clipboard thay why I posted screenshot here

Some post suggests to push a reset button very long time. but reformat hold button in ther System>Routerboard>settings is changed instantly so it doesn’t work



Anyway Thanks

16

Can you contact me directly in Telegram or Twitter? (@jabberd). I have an idea that might help you, but don’t want to share it publicly.

17

In terminal, do an EXPORT and copy from the terminal screen.

18

Why do you believe that this can work?

19

@korawit

Follow this link and do exactly that. I saved a router from netinstall because of the netwatch trick.

Regards,

Sent from Tapatalk

20

I just send to the Mikrotik service center , They said about detach NAND gate on the routerboard