Forum Discussion

Aspirant

Feb 25, 2019

Antivirus alert: Doc.Malware.Sagent-6865733-0

ReadyNAS 314 - Fw 6.9.5 After last update of antivirus engine (Feb 24, 2019), i recive alert "System: Antivirus scanner found a threat (Doc.Malware.Sagent-6865733-0)" on every winword document ...

GKCanada

Aspirant

Feb 26, 2019

I also just started receiving hundreds of alert emails saying the exact same thing:

Antivirus scanner found a threat (Doc.Malware.Sagent-6865733-0) in the file /data/xxxxxx. Please delete the infected file soon.

These files have been on my system for 5-10+ years and many have not been accessed for the same amount of time. It's driving my inbox crazy and I triple checked some files. Nothing appears to be suspicious.

nsne

Virtuoso

Feb 26, 2019

Same issue. I actually scanned the files with ClamXAV, which is a macOS frontend for ClamAV, and the files were shown to be clean. So I'm not sure what's going on. But the alerts are driving me a bit mad too.

GKCanada
Aspirant
Feb 27, 2019
Hi again. Good news, yesterday I updated the firmware to my NAS and for 24hrs+ the have been no more alerts. My email is quiet again! As far as I tell, that had been the only change I have made. Firmware update was not significantly, went from 6.9.4 to 6.9.5 (I think). Maybe it has paused and I'll eat me words tonight, but I have given it more than 24hrs and so far so good.
- tecniciCaq
  Aspirant
  Feb 27, 2019
  GKCanada wrote:
  Hi again. Good news, yesterday I updated the firmware to my NAS and for 24hrs+ the have been no more alerts. My email is quiet again! As far as I tell, that had been the only change I have made. Firmware update was not significantly, went from 6.9.4 to 6.9.5 (I think). Maybe it has paused and I'll eat me words tonight, but I have given it more than 24hrs and so far so good.
  
  Yesterday was released new Antivirus scanner definition updated 58.25372 and resolved exploit (not firmware)
  - StephenB
    Guru - Experienced User
    Feb 27, 2019
    tecniciCaq wrote:
    
    Yesterday was released new Antivirus scanner definition updated 58.25372 and resolved exploit (not firmware)
    
    Certainly it was ClamAV's issue. Upgrading the firmware would trigger apt-get updates though, so it could have gotten the new definitions onto the NAS more quickly.