NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
fake_upd blocking with Norton Antivirus
I just updated my Netgear firmware and am now constanty seeing my Nortin Antivirus blocking someing called 'fake_upd'... anyone heard of this, what is it, and how do I make it go away?
Big thank you to Antidode and Myersw for the suggestion to remove the NetGearGenie App from my Mac. That removed the probem. I will take your suggeston and use the NetGear website exclusively. I spent hours on the phone with NetGear - where they offered to have me pay $100 to remove the problem. When I saw your suggestion to remove the App, I did a head slap, then followed you advice... now I am problem free. Well done to you both!
Sorry for the typo - it does read Fake_UDP.
I use a Mac which is running High Sierra V10.13.6.
I updated the firmware on both my router (R7000) as well as the new router extender (EX7000). I don't know what the previous firmware was but the current firmware on the router is V2.4.38 and the current firmware on the extender is V1.0.1.78_1.0.140. I performed the updates to the Router and Extender from NetGearGenie, and Netgear websites respectively.
> Sorry for the typo - it does read Fake_UDP.
With or without the capital letters?
> [...] I don't know what the previous firmware was but the current
> firmware on the router is V2.4.38 [...]
That's not an R7000 firmware version. It might be something like a
Mac Genie app version number.
Apparently, the Mac Genie app (recent versions?) does something which
some anti-virus software doesn't like.
Unless I really needed some feature which only the Genie app
provides, I'd discard it, and stick with the web-browser interface.
Unless I really needed some feature which only the Genie app
provides, I'd discard it, and stick with the web-browser interface.I agree. The apps that are supposed to be helpful seem to cause more headaches then just pointing browser at the router's IP address which is usually 192,168.1.1. I personally have never found where I wished I had one of the Genie apps installed.
Please query the Internet security **** vendors about _their_ messages - for an explanation, for a risk description, for a possible remediation. This message is not generated by Netgear, neither by the router or extender firmware nor by the Genie program/App.
> [...] This message is not generated by Netgear, neither by the router
> or extender firmware nor by the Genie program/App.
Well, duh. The _message_, whatever/whoever emits it, refers to an
_action_ by "NETGEARGenie.app", as seen in the cited thread. Why any
part of "NETGEARGenie.app" is trying to open a UDP connection to
"0.0.0.163:55" is a mystery to me, but I can see why some anti-virus
program might complain about it.
It's such nonsense that, personally, I'd be tempted to "Allow" "Only
0.0.0.163 and UDP port 55 (isi-gl)" just to shut it up, but I'd like to
see an explanation from Netgear of the purpose of this nonsense.
