What devices are you suggesting this version is for?
On 05/16/2016 06:56 AM, Matt Hardy via Ubnt_users wrote:
Yes v5.6.5 automatically removes everything from the /etc/persistent
folder, so no custom scripts (including the virus/worm) can run.
On Sun, May 15, 2016 at 11:02 PM, CBB - Jay Fuller
<[email protected] <mailto:[email protected]>> wrote:
5.6.5 doesn't auto cure if it finds one does it?
our subnets are pretty random - i also don't want to watch the
cure app
but i doubt we're infected....
----- Original Message -----
*From:* Adair Winter <mailto:[email protected]>
*To:* Ubiquiti Users Group <mailto:[email protected]>
*Sent:* Sunday, May 15, 2016 8:38 PM
*Subject:* Re: [Ubnt_users] Infection fix via ansible
thanks for the info.
I'm running the ubnt cure java app and on the subnet with the
two ap's we found it hasn't found any clients (that I've seen
anyway, haven't been sitting in front of the computer the
whole time) infected and just wondering if I need to go
looking all over the network.
On Sun, May 15, 2016 at 8:34 PM, Kevin Lamothe
<[email protected] <mailto:[email protected]>> wrote:
Yes, it scans random netblocks.
If your unit isn't firewalled from connecting to other
units, it will
spread that way.
On 2016-05-15 9:27 PM, Adair Winter wrote:
>
> Ok. Does anyone know if the worm can jump subnets or
does it only
> affect what it can see on layer 2?
>
> On May 15, 2016 8:23 PM, "Matt Hoppes"
> <[email protected]
<mailto:[email protected]>
> <mailto:[email protected]
<mailto:[email protected]>>> wrote:
>
> Time.. ticking time bomb. you got it before it reset.
>
> On 5/15/16 8:52 PM, Adair Winter wrote:
> > Really? We found two infected aps that were still
working.
> >
> > On May 15, 2016 7:49 PM, "Mike Lyon"
<[email protected] <mailto:[email protected]>
> <mailto:[email protected]
<mailto:[email protected]>>
> > <mailto:[email protected]
<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>> wrote:
> >
> > it will wipe the configuration of the radio
requiring a
> truck roll :(
> >
> > -Mike
> >
> >
> > On Sun, May 15, 2016 at 5:45 PM, CBB - Jay Fuller
> > <[email protected]
<mailto:[email protected]>
> <mailto:[email protected]
<mailto:[email protected]>>
> <mailto:[email protected]
<mailto:[email protected]>
> <mailto:[email protected]
<mailto:[email protected]>>>> wrote:
> >
> > __
> > aside from not being able to access a
radio via HTTP,
> what is an
> > actual symptom of this infection?
> > will it "brick' the radio, aka, not pass
traffic? our field
> > techs are asking and i am still getting up
to speed.
> > i don't think we are affected yet...
> >
> > ----- Original Message -----
> > *From:* Roy
<mailto:[email protected] <mailto:[email protected]>
> <mailto:[email protected]
<mailto:[email protected]>>>
> > *To:* Ubiquiti Users Group
> <mailto:[email protected]
<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>
> > *Sent:* Sunday, May 15, 2016 5:55 PM
> > *Subject:* Re: [Ubnt_users] Infection
fix via ansible
> >
> >
> >
> > The Java version seems to work OK for
me. Got about
> 50% of
> > the radios upgraded without finding
any "infection". I
> > didn't expect any since all my radios
have RFC1918
> IP addresses
> >
> >
> >
> > On 5/15/2016 3:10 PM, Jeff Evans wrote:
> >> No, I saw the Java version and
running that now,
> although
> >> it's not finding anything which is
what I expected.
> >> Will play with it when there is less
pressure to
> upgrade.
> >> Thanks Mike!
> >> Jeff
> >>
> >>
> >>
> >> Sent from my Verizon, Samsung Galaxy
smartphone
> >>
> >
> >
>
------------------------------------------------------------------------
> >
> > _______________________________________________
> > Ubnt_users mailing list
> > [email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
> <mailto:[email protected]
<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>
> > http://lists.wispa.org/mailman/listinfo/ubnt_users
> >
> >
> > _______________________________________________
> > Ubnt_users mailing list
> > [email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
> <mailto:[email protected]
<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>
> > http://lists.wispa.org/mailman/listinfo/ubnt_users
> >
> >
> >
> >
> > --
> > Mike Lyon
> > 408-621-4826 <tel:408-621-4826> <tel:408-621-4826
<tel:408-621-4826>> <tel:408-621-4826 <tel:408-621-4826>
> <tel:408-621-4826 <tel:408-621-4826>>>
> > [email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
> <mailto:[email protected]
<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>
> >
> > http://www.linkedin.com/in/mlyon
> >
> >
> >
> >
> > _______________________________________________
> > Ubnt_users mailing list
> > [email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
> <mailto:[email protected]
<mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>>
> > http://lists.wispa.org/mailman/listinfo/ubnt_users
> >
> >
> >
> > _______________________________________________
> > Ubnt_users mailing list
> > [email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
> > http://lists.wispa.org/mailman/listinfo/ubnt_users
> >
> _______________________________________________
> Ubnt_users mailing list
> [email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
>
> _______________________________________________
> Ubnt_users mailing list
> [email protected] <mailto:[email protected]>
> http://lists.wispa.org/mailman/listinfo/ubnt_users
_______________________________________________
Ubnt_users mailing list
[email protected] <mailto:[email protected]>
http://lists.wispa.org/mailman/listinfo/ubnt_users
--
Adair Winter
VP, Network Operations / Co-Owner
Amarillo Wireless | 806.316.5071 <tel:806.316.5071>
C: 806.231.7180 <tel:806.231.7180>
http://www.amarillowireless.net <http://www.amarillowireless.net/>
<http://www.amarillowireless.net>
------------------------------------------------------------------------
_______________________________________________
Ubnt_users mailing list
[email protected] <mailto:[email protected]>
http://lists.wispa.org/mailman/listinfo/ubnt_users
_______________________________________________
Ubnt_users mailing list
[email protected] <mailto:[email protected]>
http://lists.wispa.org/mailman/listinfo/ubnt_users
_______________________________________________
Ubnt_users mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/ubnt_users
_______________________________________________
Ubnt_users mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/ubnt_users