NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Paul-D
Mar 01, 2024Aspirant
RN204 - anti virus finding multiple infected files
Hi I have a RN204 with 4x2Tb disks raid 5. OS 6.10.10 Virus definitions being updated daily and protect ready NAS OS is enabled. (data has been backed and verified clean) I am getting notification...
Paul-D
Mar 10, 2024Aspirant
Hi Sandshark
Thanks for your reply. Sorry for the big gap in time to respond to you.
I have carried out a factory reset (Wednesday) and for a couple of days there were no reported viruses. I gradually copied back data to some of the shares. (not the one in the root folder) Yesterday I had a notification of viruses in some .eml files today an additional virus and trojan same as before. The infection seams to follow a similar pattern .eml first then onto dropping virus etc into .dll and .exe. Theses latest infections are on a shared folder so I scanned using AVG from my laptop. No malware was identified.
As you say the issue is seeing how the infections are getting onto the NAS as all of the connected devices are running AVG. After the factory reset I imported the configuration file previously saved. This had been scanned as reported as clear. To date there has been no infections reported on the NAS I use for backup. (RN214)
Today I have removed FTP and ReadyDLNA services. Could these have been the route in?
Further information the infection is turning off the Antivirus service which I keep turning on. I have just tried to download a custom configuration file and this was declined as being insecure by the browser I am now using AVG secure browser.
I have raised a query with AVG and am awaiting a response.
I am now considering another Factory reset and not importing a configuration and resetting from scratch the shares users etc. Do you think this is a sensible route?
Thanks for the help
Sandshark
Mar 11, 2024Sensei
No, I do not think that's going to solve your problem. There is no way I can see for a configuration file to be a mechanism that gets viruses into your NAS. You have some active process, most likely not on the NAS itself, but which has access to the NAS, which is allowing viruses to propagate to the NAS. And until you find what that is and eliminate it, you're going to have the problem return no matter what you do.
I would start by not mapping the NAS on all of the machines,
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!