Hi, i have this in log
https://prnt.sc/somztx
I changed password but have the same,
when i delete this file from mikrotik in downloaded automatically again.
They are not proud of this but it does exists at least:
https://blog.mikrotik.com/security/
This is the last one who’s router was hacked:
http://forum.mikrotik.com/t/my-mikrotik-is-hacked-found-file-7wmp0b4s-rsc/139824/1
thanks