We have developed a tool to assist with removing / patching devices for anyone that may be infected with the worm. This will remove any occurrences of the worm, and if desired, will automatically update the firmware.
The tool may be found here:
http://dl.ubnt.com/XN-fw-internal/to...alware-0.4.jar
MD5 (CureSkynetMalware-0.4.jar) = 9310926b691b7f95e0ba2c973a5d09c2
WARNING: Skynet removal tools provided by others (via e-mail, downloaded from unofficial ubnt.com website, etc) use on your own risk and be aware that it may be a new virus.
Here is sample usage:
$ java -jar CureSkynetMalware.jar
Possible formats for IP(s):
IP <192.168.1.1>
IP list <192.168.1.1, 192.168.1.2>
IP range <192.168.1.1-192.168.1.254>
Enter IP(s): 10.100.10.2-10.100.10.3
Possible actions:
Check
Check and Cure
Check, Cure and Update
Enter action <1|2|3>: 2
Enter ssh port : 22
Enter user name: ubnt
Reuse password : y
Processing ubnt@10.100.10.2:22 ...
Password for ubnt@10.100.10.2:
Checking... |
This will work for both v4 and v5 firmware versions. If you have any questions, please let us know.
EDIT - Updated to v0.4 version, which fixed an issue when upgrading devices that causes them to be come unresponsive.