NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
goodrip12
Jan 14, 2017Guide
No antivirus updates since upgrade to 6.6.1
Since upgrading to OS 6.6.1 from 6.6.0 last weekend, I have not had any antivirus updates. Also, there is nothing in log showing that it's trying to update the AV definitions....
46 Replies
Replies have been turned off for this discussion
- gbeddowLuminary
Similar behavior here. Upgraded from 6.6.0 to 6.6.1 on 01/11/17, got antivirus update on 01/12/17, but nothing since then.
After the upgrade I noticed ctscand was no longer running and clamd was running. Presumably Netgear switched antivirus vendors. However clamd stopped running on 01/13/17. Here was the most recent entry in the syslog:
Jan 13 06:15:24 Netgear-RN202 clamd[1247]: SelfCheck: Database status OK.After that, nothing further from clamd. I noticed, however, something called freshclam is running:root 2111 3.8 0.3 10304 6540 ? Ss 06:40 0:12 /usr/bin/freshclam --quietAlso tried rebooting, and disabling, then re-enabling, virus checking from ReadyNAS admin page. clamd still not running, and no antivirus updates.I tried running :
'sudo freshclam' as admin user, and the server appeared to perform an update, though the admin gui did not show the update.
After a server restart, it did show the update on the gui....
From terminal several hours later, I see the following though :
$ sudo service clamav-freshclam status
● clamav-freshclam.service - ClamAV virus database updater
Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
Active: inactive (dead) since Sat 2017-01-14 22:30:31 WET; 6s ago
Process: 2236 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=0/SUCCESS)
Main PID: 2236 (code=exited, status=0/SUCCESS)I can start it with :
sudo service clamav-freshclam start
and status comes back :
clamav-freshclam.service - ClamAV virus database updater
Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
Active: inactive (dead) since Sat 2017-01-14 22:30:31 WET; 6s ago
Process: 2236 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=0/SUCCESS)
Main PID: 2236 (code=exited, status=0/SUCCESS)Jan 14 22:30:22 MegaNAS systemd[1]: Starting ClamAV virus database updater...
Jan 14 22:30:22 MegaNAS freshclam[2236]: ClamAV update process started at Sat Jan 14 22:30:22 2017
Jan 14 22:30:22 MegaNAS freshclam[2236]: main.cvd is up to date (version: 57, sigs: 4218790, f-leve
l: 60, builder: amishhammer)
Jan 14 22:30:23 MegaNAS freshclam[2236]: Downloading daily-22892.cdiff [100%]
Jan 14 22:30:23 MegaNAS freshclam[2236]: Downloading daily-22893.cdiff [100%]
Jan 14 22:30:27 MegaNAS freshclam[2236]: daily.cld updated (version: 22893, sigs: 1360574, f-level:
63, builder: neo)
Jan 14 22:30:27 MegaNAS freshclam[2236]: bytecode.cvd is up to date (version: 285, sigs: 57, f-leve
l: 63, builder: bbaker)
Jan 14 22:30:31 MegaNAS freshclam[2236]: Database updated (5579421 signatures) from database.clamav
.net (IP: 193.1.193.64)
Jan 14 22:30:31 MegaNAS freshclam[2236]: Clamd successfully notified about the update.
Jan 14 22:30:31 MegaNAS systemd[1]: Started ClamAV virus database updater.So this appears to have kicked things off again, but I expect the daemon to stop again... any ideas anyone?
- mdgm-ntgrNETGEAR Employee Retired
sudo? That's superfluous when logged in to SSH as root. sudo is used to run commands as if you were the root user.
Can you send in your logs (see the Sending Logs link in my sig)?
- chrheiLuminary
Hi all
It's working for me on me RN202 but not for my RN102:
- RN202 ist getting daily updates after upgradeing to 6.6.1
- RN102 upgraded to 6.6.1 on 04Jan2017 and AV update recived. Since then no more updates shown in the Web-Interface. But >>freshclam<< is showing the latest AV signatures!?
- gbeddowLuminary
mdgm: Could you post what we should expect to see with antivirus in 6.6.1? How often it should update definitions, whether freshclam should be running, whether clamd should be running, etc.?
Still no antivirus updates here since 1/12/17. Four days is a long time without updated antivirus definitions. clamd not running. freshclam running, but doesn't seem to be doing much.
Thanks.
- viperhansaVirtuoso
Hi all,
I seem to have the update on 6.6.1 but i dont have access to any antivirus app like we had prior to 6.6.1.
I have the V on SYSTEM / overview page but when i click that i go straight to the shares view.
If i click the Antivirus "update info" i only get a box where i can disable the antivirus....
Is it not possible anymore to configure the antivirus, like wich folders, timers and so on?
Regards
Hans
- Irish_JohnAspirant
Same here, immediately after applying the 6.6.1 firmware I now have no access/ view of app and settings.
Too early to tell if it is just hidden or actually not running at all.
Really bad regression testing methinkst!
- mdgm-ntgrNETGEAR Employee Retired
Have you tried ReadyNASOS 6.7.0-T158 (Beta 1) yet?
- nsneVirtuoso
I'm seeing the same thing. Updated on January 4, no AV updates since then. Running a 314 and have rebooted several times.
- orsmithTutor
No antivirus updates since upgrade to 6.6.1 and with following two error messages:
System: Antivirus scanner found a threat (Win.Worm.Tenga-73) in the file /data/._share/SHARE/.snapshot/b_1485266707_5604/Downloads/Norton Internet
System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection.
No problems with internet access from various other programs
orsmith wrote:No antivirus updates since upgrade to 6.6.1 and with following two error messages:
System: Antivirus scanner found a threat (Win.Worm.Tenga-73) in the file /data/._share/SHARE/.snapshot/b_1485266707_5604/Downloads/Norton Internet
System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection.
No problems with internet access from various other programs
I had a similar update failure message after the 'live update' that was rolled out which fixed the update mechanism... it turns out that my root 4Gb file system (/dev/md0) was in a read-only state.
This was due to the fact that while it was 80% full of data, according to 'df -k' but it needed a balance to sort out the btrfs metadata.
- mdgm-ntgrNETGEAR Employee Retired
The root volume shouldn't be anywhere near 80% full. You've got a lot on it if it is that full.
- orsmithTutor
I have been running with antivirus disabled since reporting experiencing this problem. Today, I updated to FW version 6.7.1 and want to know if I should keep antiviris disabled or can I enable it and expect this bug to have been fixed?
- Irish_JohnAspirant
Thats not quite the experience I had, as once I had upgraded the problem was I had no Virus checker, and the beta-ware did nothing to help. I regressed back to 6I. Today I updated to 7.6.2, and whilst I can see the anti-virus service, and turn it off and on, I cannot see any of the options I used to have wrt configuring Anti-Virus e.g. run now, update the signature or look at logs.
Regards
John.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!