Infected Cisco firewalls need cold start to clear persistent Firestarter backdoor