Antivirus scanner found a threat

---

mawcasa wrote:

Antivirus scanner found a threat (Win.Trojan.Agent-6027057-0) in the file /data/Documents/weFmgKVw.exe. Please delete the infected file soon.  ... it keeps coming back and now its weekly and some times daily.

---

You are saying that after you delete this file that it is coming back? If so, likely one of your PCs is infected with malware.  So begin by running antimalware scans on them - perhaps beginning with the free MalwareBytes software.

If you are using ReadyCloud or some other means to copy documents from your PCs to the document share, then also see if you can find this file on one of those PCs.  That would give you a good idea on where to start looking for the malware.

FWIW, though AV software sometimes does have false positives (telling you something is infected when it isn't), in this case you have an unusual file name for an executable (and executables normally aren't in document folders to begin with). This alone suggests to me that the AV scanner is likely correctly classifying it as a threat.  Plus the file keeps coming back after you delete it - which means something (likely malware) is recreating it.

BTW - are you forwarding ports in the router to your NAS?  Or perhaps put it into the router's DMZ?  If so, please give us more details on that.