Hi all,
Someone infected one of my APs and at the night it’s sending SPAM, I could access to it, and I could take the .rsc allowed in Files.
I want to know if my routerboard basebox2 is infected forever, or how could clean it, How can I do a wipping?
I just default restored.
Where can I watch if these executed scripts has added files in the system folders and how could clean it, in this case.
I have attached the files I found in the file folder.
run.rsc (137 Bytes)
inject.rsc (152 Bytes)
Hello,
Netinstall and start from scratch.
Sent from my cell phone. Sorry for the errors.
What version of RouterOS were you running?
Only safe way is to use netinstall with latest firmware.
6.41.7
remove system scheduler, remove system script, ip > proxy, system user…
then upgrade routeros…
Thx, and how they could entry on my Basebox2? :l
You did not update the software frequently enough, and you had inadequate firewall.
(also potentially poor way of accessing the router itself from remote location)