NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

goodrip12's avatar
Jan 14, 2017

No antivirus updates since upgrade to 6.6.1

Since upgrading to OS 6.6.1 from 6.6.0 last weekend, I have not had any antivirus updates. Also, there is nothing in log showing that it's trying to update the AV definitions....

46 Replies

Replies have been turned off for this discussion
  • Similar behavior here. Upgraded from 6.6.0 to 6.6.1 on 01/11/17, got antivirus update on 01/12/17, but nothing since then.

     

    After the upgrade I noticed ctscand was no longer running and clamd was running. Presumably Netgear switched antivirus vendors. However clamd stopped running on 01/13/17. Here was the most recent entry in the syslog:

     

    Jan 13 06:15:24 Netgear-RN202 clamd[1247]: SelfCheck: Database status OK.
     
    After that, nothing further from clamd. I noticed, however, something called freshclam is running:
     
    root      2111  3.8  0.3  10304  6540 ?        Ss   06:40   0:12 /usr/bin/freshclam --quiet
     
    Also tried rebooting, and disabling, then re-enabling, virus checking from ReadyNAS admin page. clamd still not running, and no antivirus updates.
     
    • goodrip12's avatar
      goodrip12
      Guide

      I tried running :

      'sudo freshclam' as admin user, and the server appeared to perform an update, though the admin gui did not show the update.

      After a server restart, it did show the update on the gui....

      From terminal several hours later, I see the following though :

       

      $ sudo service clamav-freshclam status
      ● clamav-freshclam.service - ClamAV virus database updater
      Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
      Active: inactive (dead) since Sat 2017-01-14 22:30:31 WET; 6s ago
      Process: 2236 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=0/SUCCESS)
      Main PID: 2236 (code=exited, status=0/SUCCESS)

       

      I can start it with :

      sudo service clamav-freshclam start

      and status comes back :

       

      clamav-freshclam.service - ClamAV virus database updater
      Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
      Active: inactive (dead) since Sat 2017-01-14 22:30:31 WET; 6s ago
      Process: 2236 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=0/SUCCESS)
      Main PID: 2236 (code=exited, status=0/SUCCESS)

      Jan 14 22:30:22 MegaNAS systemd[1]: Starting ClamAV virus database updater...
      Jan 14 22:30:22 MegaNAS freshclam[2236]: ClamAV update process started at Sat Jan 14 22:30:22 2017
      Jan 14 22:30:22 MegaNAS freshclam[2236]: main.cvd is up to date (version: 57, sigs: 4218790, f-leve
      l: 60, builder: amishhammer)
      Jan 14 22:30:23 MegaNAS freshclam[2236]: Downloading daily-22892.cdiff [100%]
      Jan 14 22:30:23 MegaNAS freshclam[2236]: Downloading daily-22893.cdiff [100%]
      Jan 14 22:30:27 MegaNAS freshclam[2236]: daily.cld updated (version: 22893, sigs: 1360574, f-level:
      63, builder: neo)
      Jan 14 22:30:27 MegaNAS freshclam[2236]: bytecode.cvd is up to date (version: 285, sigs: 57, f-leve
      l: 63, builder: bbaker)
      Jan 14 22:30:31 MegaNAS freshclam[2236]: Database updated (5579421 signatures) from database.clamav
      .net (IP: 193.1.193.64)
      Jan 14 22:30:31 MegaNAS freshclam[2236]: Clamd successfully notified about the update.
      Jan 14 22:30:31 MegaNAS systemd[1]: Started ClamAV virus database updater.

       

      So this appears to have kicked things off again, but I expect the daemon to stop again... any ideas anyone?

      • mdgm-ntgr's avatar
        mdgm-ntgr
        NETGEAR Employee Retired

        sudo? That's superfluous when logged in to SSH as root. sudo is used to run commands as if you were the root user.

        Can you send in your logs (see the Sending Logs link in my sig)?

  • Hi all

     

    It's working for me on me RN202 but not for my RN102:

    - RN202 ist getting daily updates after upgradeing to 6.6.1

    - RN102 upgraded to 6.6.1 on 04Jan2017 and AV update recived. Since then no more updates shown in the Web-Interface. But >>freshclam<< is showing the latest AV signatures!?

    • gbeddow's avatar
      gbeddow
      Luminary

      mdgm: Could you post what we should expect to see with antivirus in 6.6.1? How often it should update definitions, whether freshclam should be running, whether clamd should be running, etc.?

       

      Still no antivirus updates here since 1/12/17. Four days is a long time without updated antivirus definitions. clamd not running. freshclam running, but doesn't seem to be doing much.

       

      Thanks.

  • Hi all,

     

    I seem to have the update on 6.6.1 but i dont have access to any antivirus app like we had prior to 6.6.1.

    I have the V on SYSTEM /  overview page but when i click that i go straight to the shares view.

    If i click the Antivirus "update info" i only get a box where i can disable the antivirus....

     

    Is it not possible anymore to configure the antivirus, like wich folders, timers and so on?

     

    Regards

     

    Hans

    • Irish_John's avatar
      Irish_John
      Aspirant

      Same here, immediately after applying the 6.6.1 firmware I now have no access/ view of app and settings.

      Too early to tell if it is just hidden or actually not running at all.

      Really bad regression testing methinkst!

  • I'm seeing the same thing. Updated on January 4, no AV updates since then. Running a 314 and have rebooted several times.

    • Skywalker's avatar
      Skywalker
      NETGEAR Expert

      If anybody has a freshclam process in a hung state, and is willing to open remote access for us to investigate, please enable Secure Diagnostic Mode and PM me the 5-digit number.

  • No antivirus updates since upgrade to 6.6.1 and with following two error messages:

     

    System: Antivirus scanner found a threat (Win.Worm.Tenga-73) in the file /data/._share/SHARE/.snapshot/b_1485266707_5604/Downloads/Norton Internet

     

    System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection.

     

    No problems with internet access from various other programs

    • goodrip12's avatar
      goodrip12
      Guide

      orsmith wrote:

      No antivirus updates since upgrade to 6.6.1 and with following two error messages:

       

      System: Antivirus scanner found a threat (Win.Worm.Tenga-73) in the file /data/._share/SHARE/.snapshot/b_1485266707_5604/Downloads/Norton Internet

       

      System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection.

       

      No problems with internet access from various other programs


      I had a similar update failure message after the 'live update' that was rolled out which fixed the update mechanism... it turns out that my root 4Gb file system (/dev/md0) was in a read-only state.

       

      This was due to the fact that while it was 80% full of data, according to 'df -k' but it needed a balance to sort out the btrfs metadata.

       

      • mdgm-ntgr's avatar
        mdgm-ntgr
        NETGEAR Employee Retired

        The root volume shouldn't be anywhere near 80% full. You've got a lot on it if it is that full.

    • orsmith's avatar
      orsmith
      Tutor

      I have been running with antivirus disabled since reporting experiencing this problem.  Today, I updated to FW version 6.7.1 and want to know if I should keep antiviris disabled or can I enable it and expect this bug to have been fixed?

      • Irish_John's avatar
        Irish_John
        Aspirant

        Thats not quite the experience I had, as once I had upgraded the problem was I had no Virus checker, and the beta-ware did nothing to help. I regressed back to 6I. Today I updated to 7.6.2, and whilst I can see the anti-virus service, and turn it off and on, I cannot see any of the options I used to have wrt configuring Anti-Virus e.g. run now, update the signature or look at logs.

        Regards

        John.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More