hi

i was attacked since a month on my cloud router, i saw it becouse all my sume firewall rules was disabled....

so my network antivirus (avg) is reporting that i am infected with js:Miner-AL[pup], its look like a connection trying to get inside to my lan...

So i need hel how to block this type of connection on my router or block attack ,
Please if someone help me with some clear steps .

Thanks in advance.

https://blog.mikrotik.com/security/winb ... ility.html

Thanks.

So after that what is next step?

Becouse i am still receiving report about the js:Miner-AL[pup], trying get connection to my lan

Thanks in advance

Why do you think that it is router problem?
Do you think that js:Miner-AL[pup] is installed in your router?
Are you shure that your computer or any other local one are not infected with js:Miner-AL[pup]?

Find out what PC this is coming from and wipe the hard drive completely and do a fresh install.

https://blog.mikrotik.com/security/winb ... ility.html

Thanks.

So after that what is next step?

Becouse i am still receiving report about the js:Miner-AL[pup], trying get connection to my lan

Thanks in advance

I had this at a new client recently, (It was the actual reason he became a client of mine) and had this reported on his laptop, ESET AV. The router was on 6.34.2, I net-installed the router with 6.43.2, did all the necessary security and firewall things and the message no longer reported by ESET AV on his laptop.

https://blog.mikrotik.com/security/winb ... ility.html

Thanks All

Solved.. i reset and resetup the routre, and using all steps on the link you send me.