1. it first asks for your permission to share log for certain data to QNAP. it's good they ask, and also allow for an opt out.
2. there is a simple yet nice UI. i much prefer this over the previous version.
3. using UI you can start scan, check when the scan completes, and has a link directly to the log for when something was detected. this is an improvement from previous version.
4. scheduling is possible, which is great.
5. better looking app icon.
The only thing i am unsure about, is just how effective is this app? how would it compare to say.... malwarebyes.... hitman pro..... etc....
Overall i'm satisfied that the new version has improved greatly from the previous by far in terms of UI, and functionality. Before i would run the app, then remove once done. But now i feel inclined to leave this permanently on, with scheduling set.
My suggestion for improvement, is to add to the app an UI for quarantine. In case it is a false positive, the user can then go to quarantine and choose to either whitelist (so future scans would not flag it), or permanently delete. Maybe also an option whether to permanently delete after a set time has passed.
Last edited by Moogle Stiltzkin on Fri May 18, 2018 4:27 am, edited 1 time in total.
NAS [Main Server]QNAP TS-877 (QTS) w. 4tb [ 3x HGST Deskstar NAS & 1x WD RED NAS ] EXT4 Raid5 & 2 x m.2 SATA Samsung 850 Evo raid1 +16gb ddr4 Crucial+ QWA-AC2600 wireless+QXP PCIE [Backup] QNAP TS-653A (Truenas Core) w. 4x 2TB Samsung F3 (HD203WI) RaidZ1 ZFS + 8gb ddr3 Crucial [^] QNAP TL-D400S 2x 4TB WD Red Nas (WD40EFRX) 2x 4TB Seagate Ironwolf, Raid5 [^] QNAP TS-509 Pro w. 4x 1TB WD RE3 (WD1002FBYS) EXT4 Raid5 [^] QNAP TS-253D (Truenas Scale) [Mobile NAS] TBS-453DX w. 2x Crucial MX500 500gb EXT4 raid1
comparison to other programs like malwarebytes etc is a bit mute
1. they are not specifically made only for qnap decices (limited range of known attacks and vectors)
2. they don't even run on qnap (besides clamAV and McAfee)
The version 3.3.0 delete most of my LEGIT application that I was using everyday. Cah you point me wher is the folder I want to move all my SH file to their original place !. I read some of the EMAIL I received and it don't seem to have removed the file, probably only the reference in the startup file of the qnap which is also not good ?.
Is it possible for you to point me where is the startup file ?. Really sorry to disturb you with that !
Update: I found the file in /etc/config/qpkg.conf and all my app are still there ??. I'm a little bi confuse about the EMAIL my qnap send me about MAlware removed ??. I'll restart to test but I think it did nothing !
I reboot my NAS and there is no application that have been removed !. So those EMAIL were false, Sorry If I disturb you !
Thank you,
Sylvain
Last edited by Sylrob on Thu Oct 25, 2018 3:59 am, edited 3 times in total.
dolbyman wrote:we do not know how this program works (and QNAP censors/removes posts that talk about it) so you need to direct this request to qnap via ticket
No Problem I understand !
I finally chech in SSH and al my .SH are estill there and all the reference to those application are still in the startup file for the package, to be sure I reboot and everything is ok !!!
I am having the same problem. I am working with QNAP support to try and get this resolved, however, it does appear to be caused by malware/virus on the NAS. So far they have been stumped and have escalated the issue. The problem seems to related to the "immutable" attribute being set on the MalwareRemover files so the virus is attacking the MalwareRemover software.
I will report back when I have more information to share.
@babujnik,
I would suggest opening a ticket with QNAP support. They have a solution to eliminate the virus. From what I can tell they will need access to your server in order to perform the removal process. It certainly worked for me.
It might help if you reference my ticket: Ticket ID:CPJ-924-46892
Hi, new NAS newb here,
I too would like the ability to recover whatever this app deems evil.
I am now worried of false positives and will try to unistall it now.
