[GTER] Script remoção virus UBNT - ** remove e atualiza **

[Elizandro Pacheco [ Pacheco Tecnologia ]]

Ferramenta Oficial:

http://community.ubnt.com/t5/airMAX-General-Discussion/Malware-Removal-Tool-05-15-2016/m-p/1564953#U1564953


Poderiam unir as threads né?


Elizandro Pacheco


> Em 15 de mai de 2016, à(s) 14:32, Diego Canton de Brito <diegocanton at ensite.com.br> escreveu:
> 
> Obrigado Alexandre, atualizado
> 
> Em 2016-05-15 02:34, Alexandre J. Correa (Onda) escreveu:
> 
>> Versão que remove e atualiza o rádio
>> 
>> #!/bin/sh
>> #ajcorrea
>> 
>> /bin/sed -ir '/mcad/ c ' /etc/inittab
>> /bin/sed -ir '/mcuser/ c ' /etc/passwd
>> /bin/rm -rf /etc/persistent/https
>> /bin/rm -rf /etc/persistent/mcuser
>> /bin/rm -rf /etc/persistent/mf.tar
>> /bin/rm -rf /etc/persistent/.mf
>> /bin/rm -rf /etc/persistent/rc.poststart
>> /bin/rm -rf /etc/persistent/rc.prestart
>> /bin/kill -HUP `/bin/pidof init`
>> /bin/kill -9 `/bin/pidof mcad`
>> /bin/kill -9 `/bin/pidof init`
>> /bin/kill -9 `/bin/pidof search`
>> /bin/kill -9 `/bin/pidof mother`
>> /bin/kill -9 `/bin/pidof sleep`
>> /bin/cfgmtd -w -p /etc/
>> 
>> versao=`cat /etc/version | cut -d'.' -f1`
>> cd /tmp
>> 
>> if [ "$versao" == "XM" ]; then
>> URL='http://dl.ubnt.com/firmwares/XN-fw/v5.6.4/XM.v5.6.4.28924.160331.1253.bin'
>> wget $URL
>> ubntbox fwupdate.real -m /tmp/XM.v5.6.4.28924.160331.1253.bin
>> else
>> URL='http://dl.ubnt.com/firmwares/XW-fw/v5.6.4/XW.v5.6.4.28924.160331.1238.bin'
>> wget $URL
>> ubntbox fwupdate.real -m /tmp/XW.v5.6.4.28924.160331.1238.bin
>> fi
>> 
>> Diego Canton, atualiza o GITHUB lá que este procedimento já ajuda bastante a galera...
> 
> --
> gter list    https://eng.registro.br/mailman/listinfo/gter