Forum Discussion

Guide

Jan 18, 2017

Solved

Lots of Virus detection after 6.6.1 Update

Hello, I updated to 6.6.1 today and shortly after that my Virus Scanner detected a bunch of files: The First Message says my Storage is only 30% free, which is correct. The Next Message says it...

Other Discussions

kohdee
Mar 29, 2017
Try upgrading to 6.7 at the end of the week and let us know if it fixes it. We launched a hotfix for it to the systems but it requires a reboot after it applies -- that was readynasos 6.6.1+2

ThiloS

Aspirant

Jan 24, 2017

same here.

Got 1000+ Virus warnings til now... readynas is still sending up to 10 mails per minute.

Di Jan 24 2017 9:39:09	
System: Der Virenschutzscanner hat eine Gefahr ({DetectType}:Swf.Exploit.CVE_2016_4178-1) in der Datei /tmp/clamav-e0916b288087f774c1b281d6a428c3c4.tmp/nocomment.html (deleted) entdeckt. Löschen Sie die Datei, die vom Virus befallen ist.
Di Jan 24 2017 9:39:03	
System: Der Virenschutzscanner hat eine Gefahr ({DetectType}:Swf.Exploit.CVE_2016_4178-1) in der Datei /tmp/clamav-ca67c2e47e03f00044f40393a9c36399.tmp/nocomment.html (deleted) entdeckt. Löschen Sie die Datei, die vom Virus befallen ist.
Di Jan 24 2017 9:38:55	
System: Der Virenschutzscanner hat eine Gefahr ({DetectType}:Swf.Exploit.CVE_2016_4178-1) in der Datei /tmp/clamav-861e3c93068486b3fc7dffbfe7d35ec3.tmp/nocomment.html (deleted) entdeckt. Löschen Sie die Datei, die vom Virus befallen ist.
Di Jan 24 2017 9:38:49	
System: Der Virenschutzscanner hat eine Gefahr ({DetectType}:Swf.Exploit.CVE_2016_4178-1) in der Datei /tmp/clamav-0402e490e3f084f823cdd693f395e736.tmp/nocomment.html (deleted) entdeckt. Löschen Sie die Datei, die vom Virus befallen ist.
Di Jan 24 2017 9:38:43	
System: Der Virenschutzscanner hat eine Gefahr ({DetectType}:Swf.Exploit.CVE_2016_4178-1) in der Datei /tmp/clamav-7cf98f14f3fa9c44ae9b32799c7fa5e9.tmp/nocomment.html (deleted) entdeckt. Löschen Sie die Datei, die vom Virus befallen ist.

Should i deactivate the antivirus-service?

StephenB
Guru - Experienced User
Jan 24, 2017
ThiloS wrote:

Should i deactivate the antivirus-service?

I would.
the_Agent
Guide
Jan 24, 2017
I've done it immediately, there is obviously something wrong with it.
- FramerV
  NETGEAR Employee Retired
  Jan 25, 2017
  Hi the_Agent,
  
  I will be sending your post to our subject matter experts as an inquiry. I will let you know if we get updates.
  
  Regards,
- ThiloS
  Aspirant
  Jan 25, 2017
  in my case the following procedure helped:
  
  Deactivating the AntiVirus-service.
  Restarting the ReadyNas.
  Activating the AV-service again.
  
  Now there are no new warnings about any viruses...?!
  Well - at least the machine is running proper again.
  - the_Agent
    Guide
    Jan 26, 2017
    Hello ThiloS,
    
    followed your instructions but shortly after the the reactivation of Antivirus, the messages started to come in again:
    
    Thu Jan 26 2017 11:07:45
    System: Antivirus scanner found a threat (Heuristics.Broken.Executable) in the file /tmp/clamav-a9644d6f9858afe8268856743cbb4294.tmp (deleted). Please delete the infected file soon if automatic delete setting is not enabled.
    Thu Jan 26 2017 11:07:40
    System: Antivirus scanner found a threat (Heuristics.Broken.Executable) in the file /tmp/clamav-7e4ec20ad581164a2b1db43a68a80a61.tmp (deleted). Please delete the infected file soon if automatic delete setting is not enabled.
    Thu Jan 26 2017 8:16:35
    System: Antivirus scanner definition file was updated to 57.22948.
    Thu Jan 26 2017 8:14:41
    System: ReadyNASOS background service started.
    Thu Jan 26 2017 8:13:19
    System: The system is rebooting.