NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
dabanh_freak
Jan 23, 2019Tutor
RN214 Plex malware file detected.
Woke up this morning to find a strange warning message from my NAS
Antivirus scanner found a threat (Win.Malware.Triusor-6824994-0 ) in the file /data/.apps/plexmediaserver-an napurna/Binarie...
jljeeper
Jan 24, 2019Tutor
I also got the same exact message thismorning
Antivirus scanner found a threat ( Win.Malware.Triusor-6824994-0) in the file /apps/plexmediaserver-annapurna/Binaries/Resources/Python/lib/python2.7/ensurepip/_bundled/pip-8.1.1-py2.py3-none-any.whl. Please delete the infected file soon
Malius
Jan 28, 2019Aspirant
I have the same message, and one more thing. This afternoon, all three of my disks turned RED in the System>Volumes page, and the Shares page tells me I have no shares. I hope these are unrelated.
- StephenBJan 28, 2019Guru - Experienced User
Malius wrote:
I hope these are unrelated.
I think they are unrelated, as the antivirus error is alreay identified as a false positive in the ClamAV forum (the ReadyNAS AV software is ClamAV),
Have you downloaded the logs and looked at the disk health (disk_info.log)?
- MaliusJan 28, 2019Aspirant
Yes, the disk health is perfect. I'm engaging in a chat support with Netgear, and they tell me that the "md127" or the NAS' data partition is gone.
Apparently the symptoms point to a file system or a "btrfs" issue.
I don't know what the cause coud be. There was no unusual activity -- in fact not much activity at all except for Time Machine backups, which were proceeding without problem. As for the virus, it's probably real, but irrelevant. It is a Windows virus and might pose a risk to hardware on my network, but not the NAS.
Support has been elevated a level or two, and an attempt to rebuild the volume will soon begin.
m
- o98n34cFeb 25, 2019Aspirant
I have been seeing Antivirus scanner find threats (Doc.Malware.Sagent-6865733-0) for the last 3 days. So far, more than 100 files have been infected, which I have deleted. There seems to be no stopping this. HELP! How do I stop this before it infects every file on my NAS?
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!