Virus on Mikrotik (?) + formatting (?) router

RouterOS General
1

Hello,

I got a message from my ISP. It says my Mikrotik router has a virus and must be formatted.

I would like to ask for little help. 2 questions:

  1. Is it even possible Mikrotik can get a virus some way? I have non-default user credential since first login, so I think it must be really sofisticated to put a virus into Mikrotik.
  2. Can be Mikrotik formatted? Is it same like upgrading firmware?

Feel free to ask for any additional information. I am not sure what everything is important to answer my questions.

Thank you very much.

PS: My Mikrotik model is in signature.

2

This is what happened to you:
http://forum.mikrotik.com/t/advisory-vulnerability-exploiting-the-winbox-port-solved/118771/1

And I would recommend the added step of doing a Netinstall to insure your device is clean.
https://wiki.mikrotik.com/wiki/Manual:Netinstall

3

Thank you very much for quick reply.

Tell me, can I check some way if the router really has a virus? I have a bad relationship with my ISP (related to invoices) and I am not sure if ISP is not trying something on me. So, can I check he is true with the virus on my router?

I tried some web check from f-secure and norton and it did not find anything.

Now I am going to study the topics and fix it. Thank you again.

4

More info: https://blog.mikrotik.com/security/winbox-vulnerability.html