This script is used to remove the virus to ubiquiti radios discovered on 05/13/2016 more information at: http://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940

This script change default port HTTP for 81

The exploit use USER:mother and PASS:fucker try it before your user and pass, in test it's work. This script remove this user.

Multiple radios via SSHPASS

---

You can use a single Linux machine with SSHPASS installed to clear all your network equipment improving the sample script clearmf.sh

Ex: ./clearmf.sh PASS USER NETWORK INITIAL_IP

Or or create a script with the following command

sshpass -p PASS ssh -o StrictHostKeyChecking=no USER@IP "wget -qO- https://raw.githubusercontent.com/diegocanton/remove_ubnt_mf/master/desinfect.sh | sh"

You need install in server SSHPASS

• Debian: apt-get install sshpass
• Centos: yum install sshpass

Direct in Radio

---

You may prefer to run the command only a single radio to this run the following command

wget -qO- https://raw.githubusercontent.com/diegocanton/remove_ubnt_mf/master/desinfect.sh | sh