NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
tecniciCaq
Feb 25, 2019Aspirant
Antivirus alert: Doc.Malware.Sagent-6865733-0
ReadyNAS 314 - Fw 6.9.5
After last update of antivirus engine (Feb 24, 2019), i recive alert "System: Antivirus scanner found a threat (Doc.Malware.Sagent-6865733-0)" on every winword document ...
rph1
Feb 25, 2019Star
Hi All,
Just wanted to provide another update. I turned off sending emails in the ReadyNAS for virus infections for now to prevent the flow of files it thinks are infected coming to my mailbox. I also submitted a false positive report to ClamAV, using this link:
https://www.clamav.net/reports/fp
If you are experiencing this problem and verified it appears to be a false positive, you may want to do the same. It seems like that to me when 58 programs pass it as fine and only ClamAV says it is infected.
rph1
Feb 26, 2019Star
Hi All,
Latest update, the virus definition file on my ReadyNAS was updated yesterday at 2:45pm PST to version 58.25371 but that did not make a difference. There are still a whole slew of entries in the log file indicating word docs are infected. I ran one of the new files it identified as malware through Virus Total and it passed all scanners, including ClamAV so at this point I assume my device just doesn't have the most recent file definitions that properly detects this. I will monitor the logs to see when the virus definition file gets updated and if the reports of this stop.
- GKCanadaFeb 26, 2019Aspirant
I also just started receiving hundreds of alert emails saying the exact same thing:
Antivirus scanner found a threat (Doc.Malware.Sagent-6865733-0) in the file /data/xxxxxx. Please delete the infected file soon.
These files have been on my system for 5-10+ years and many have not been accessed for the same amount of time. It's driving my inbox crazy and I triple checked some files. Nothing appears to be suspicious.
- nsneFeb 26, 2019Virtuoso
Same issue. I actually scanned the files with ClamXAV, which is a macOS frontend for ClamAV, and the files were shown to be clean. So I'm not sure what's going on. But the alerts are driving me a bit mad too.
- GKCanadaFeb 27, 2019AspirantHi again. Good news, yesterday I updated the firmware to my NAS and for 24hrs+ the have been no more alerts. My email is quiet again! As far as I tell, that had been the only change I have made. Firmware update was not significantly, went from 6.9.4 to 6.9.5 (I think). Maybe it has paused and I'll eat me words tonight, but I have given it more than 24hrs and so far so good.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!