Community discussions

MikroTik App
 
User avatar
pthunya
Trainer
Trainer
Topic Author
Posts: 35
Joined: Mon Jun 24, 2013 9:54 pm

Mikrotik device has been hacked and the hack script disable many things. can't Netinstall. What should I do?

Wed Dec 20, 2017 5:20 am

Dear who may concern,

My friend Mikrotik has been hacked, the hack script disabled Jumper Reset, Protected Routerboot, set boot device to "nand-only" and reduced admin right to able to read only as screenshot I attached.

Anything I can do?
2017-12-20_10-13-04.jpg
2017-12-20_10-14-10.jpg
2017-12-20_10-14-34.jpg
2017-12-20_10-14-59.jpg
You do not have the required permissions to view the files attached to this post.
Last edited by pthunya on Wed Dec 20, 2017 10:27 am, edited 1 time in total.
 
User avatar
karlisi
Member
Member
Posts: 440
Joined: Mon May 31, 2004 8:09 am
Location: Latvia

Re: Mikrotik device has been hacked and the hack script disable many things. What should I do?

Wed Dec 20, 2017 8:30 am

Have You tried Netinstall?
 
User avatar
pthunya
Trainer
Trainer
Topic Author
Posts: 35
Joined: Mon Jun 24, 2013 9:54 pm

Re: Mikrotik device has been hacked and the hack script disable many things. What should I do?

Wed Dec 20, 2017 10:12 am

By this kind of setting, I can't NetInstall. That why I have to ask here. :'(
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26381
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Mikrotik device has been hacked and the hack script disable many things. What should I do?

Wed Dec 20, 2017 10:27 am

With protected routerboot option enabled, you need to hold the reset button for 4 minutes and 54 seconds when booting (it's in your first picture!). This will reset your device. More info about protected bootloader:
https://wiki.mikrotik.com/wiki/Manual:R ... bootloader

This is what you need to do for your OTHER routers: https://wiki.mikrotik.com/wiki/Manual:S ... our_Router
 
User avatar
pthunya
Trainer
Trainer
Topic Author
Posts: 35
Joined: Mon Jun 24, 2013 9:54 pm

Re: Mikrotik device has been hacked and the hack script disable many things. can't Netinstall. What should I do?

Wed Dec 20, 2017 10:52 am

Thank you :)
 
tachyonnoc
just joined
Posts: 4
Joined: Fri Nov 03, 2017 12:45 pm

Re: Mikrotik device has been hacked and the hack script disable many things. can't Netinstall. What should I do?

Tue Feb 11, 2020 1:10 pm

Hi Normis, My Hex Lite got hacked, now im facing the same situation as this thread, I tried to press the button for 5 min but now my hex is looking like its bricked,
what to do ??
Please help
 
tachyonnoc
just joined
Posts: 4
Joined: Fri Nov 03, 2017 12:45 pm

Re: Mikrotik device has been hacked and the hack script disable many things. What should I do?

Tue Feb 11, 2020 1:11 pm

With protected routerboot option enabled, you need to hold the reset button for 4 minutes and 54 seconds when booting (it's in your first picture!). This will reset your device. More info about protected bootloader:
https://wiki.mikrotik.com/wiki/Manual:R ... bootloader

This is what you need to do for your OTHER routers: https://wiki.mikrotik.com/wiki/Manual:S ... our_Router
Hi Normis, My Hex Lite got hacked, now im facing the same situation as this thread, I tried to press the button for 5 min but now my hex is looking like its bricked,
what to do ??
Please help
Ethernet ports are also now not working after pressing the button for 5 min, i tried rebooting but it didn't helped.
 
r00t
Long time Member
Long time Member
Posts: 674
Joined: Tue Nov 28, 2017 2:14 am

Re: Mikrotik device has been hacked and the hack script disable many things. can't Netinstall. What should I do?

Tue Feb 11, 2020 6:19 pm

After reformatting NAND memory, your router can only be neinstalled, all normal OS have been wiped in the process. Look in the documentation for your hardware to see which port you can use to netinstall and use just direct cable from router to your PC, with fixed IP set in windows etc... entire process is well documented in the MIkrotik wiki

Who is online

Users browsing this forum: GoogleOther [Bot] and 188 guests