My NEC sv8100 had been hacked. How I can save it?

[Yue C]

My sv8100 was hacked last weekend, resulting in high phone bills. I tried cold start and reset. However, the hacking program still exists, and it will be activated every night, starting to make uninterrupted international long-distance calls. Has anyone encountered this situation? How can I save my SV8100 back to a clean state? I am in China, sv8100 version 3.00, and have been working for many years. Who can share a firmware to me, I want to completely cover the current firmware. Thanks a lot

 

[belevedere]

They probably got in through the VM. Check all VM boxes for outdial numbers that do not belong and delete them. Add/change passwords to all VM boxes and deactivate any not used.

 

[Yue C]

Thank you Belevedere. I had removed VM box and add passwords.
Yesterday I watch this video "

https://www.youtube.com/watch?v=gX9oFGINpTM"

and change some settings.
I plan to buy a second-hand CP-00 card and replace it.
Do you have a high version firmware of sv8100? I hope I can upgrade it. my email is xyhill@sina.com.

 

[OzzieGeorge]

Silly question I know but do you or the last tech you used have a pre hack backup? If one is available just factory default the system and reload the backup! You may have issues with firmware from America, you need to find out if there is a firmware specific to China and you also need to be careful buying a second hand CP00 as it may not have the licenses you need and transferring your licences is very difficult better to sort your processor out as it is highly unlikely the hackers have done anything more than arranged a call forward somewhere. It is possible to do partial loads too so one thing you can start with is open a new database and do a partial reload of commands 47 (warning this will default your voicemail settings and all voicemail boxes) then if that doesn't stop the problem you can do a partial reload of 24-09 to default all call forward settings. If you take a backup first and doing the partial reloads don't work you can put them back if needed and at the very least you will have a reference to look back on if you default the system completely and reload manually.