NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
lechef
Aug 06, 2015Tutor
ReadyNAS disrupts TV?
The setup My NETGEAR ReadyNAS Ultra 2 (I know, she's old but still lovely!) is connected by a single LAN cable to my local network. That local network also connects three laptops, two cellphones (al...
- Aug 07, 2015
Thanks for the logs.
Your system clearly has been hacked.
Do you have a backup of your data?
I would suggest you backup the data on the NAS, do a factory default (wipes all data, settings, everything) and restore your data from backup.
lechef
Aug 07, 2015Tutor
Thanks for all the help!
I don't have the data backed up yet. Could I attach one of the two hard drives to my Ubuntu laptop and copy data? I know the file system should be some ext version, so that wouldn't be an issue. However, the drives are configured in RAID as is the default, and I don't know if that will present any problem.
I don't have the data backed up yet. Could I attach one of the two hard drives to my Ubuntu laptop and copy data? I know the file system should be some ext version, so that wouldn't be an issue. However, the drives are configured in RAID as is the default, and I don't know if that will present any problem.
- mdgm-ntgrAug 07, 2015NETGEAR Employee Retired
I wouldn't recommend connecting one/both of the disks to a Ubuntu PC. That would be a last resort for data recovery.
- StephenBAug 07, 2015Guru - Experienced User
I suggest doing a direct connect from the NAS to a PC (which will eliminate any attempts of the hacked NAS to reach the internet), and backing up over the network.
You could also do USB backup on the ultra also, but since the NAS has been hacked it'd be best to block its internet access.
- lechefAug 07, 2015Tutor
I connected the NAS and a laptop to a separate router, not connected to the regular local network. I attached a hard drive and copied my important files to that drive by sending commands over SSH. Then, I did a factory reset and OS reinstall as described on p.13 of the hardware manual, updated the firmware to 4.2.28-T6 and changed the default passwords. I removed the port forwarding from the regular router, except for HTTP. Then I reconnected the device to the regular local network, added the SSH addon, and started copying my files back and configuring the machine to my settings.
The symptoms are gone! No more disruptions on the TVs. Thank you so much for the help!
As a side effect, the long response time to log in over SSH (10 sec to more than a minute before you get the password prompt since sending the ssh command) are gone now as well.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!