After scan Malware Remover phpmyadmin has been stopped

Post your questions about Web Server usage and Apache + PHP + MySQL/SQLite web applications.
Post Reply
scha@fsma.nl
First post
Posts: 1
Joined: Tue Mar 16, 2021 7:28 pm

After scan Malware Remover phpmyadmin has been stopped

Post by scha@fsma.nl »

I always get 3 messages when the Malware Remover has been running:
1. "Removed the detacted malware: MR2101"
2. "Removed malware. You must restart the NAS"
3. Removed high-risk malware. Immediately update QTS and all applications to their latest versions and use stronger account passwords"
The phpmyadmin has stopped and de websites are not working anymore. The rest of the NAS functionality works fine.

I have done all items mentioned avbove BUT ... every time I restart the Malware Remover the same errors appear again (over and over).
I stopped using the Malware Remover in order to keep the websites in the air.


Questions:
- What is MR2101? I can't find any clue on the web
- Is it very harmful not to use the Malware Remover?

Victor
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: After scan Malware Remover phpmyadmin has been stopped

Post by dolbyman »

You probably have a persistant underlying infection (NAS needs to be nuked).. I guess the NAS is exposed to the web? (Never do that)

Get a cheap webhoster for outaide facing websites, do not endanger your data on your NAS to save some bucks
cheenee
New here
Posts: 5
Joined: Mon Aug 24, 2020 6:57 pm

Re: After scan Malware Remover phpmyadmin has been stopped

Post by cheenee »

My NAS is version 5.0, and this prompt also appears. What is MR2101?
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: After scan Malware Remover phpmyadmin has been stopped

Post by dolbyman »

Only QNAP knows..best to ask them via ticket
Angelo Mascaro
Starting out
Posts: 16
Joined: Fri Sep 18, 2015 4:36 pm

Re: After scan Malware Remover phpmyadmin has been stopped

Post by Angelo Mascaro »

I have the same problem. Every night "malware remover" disable phpmyadmin and delete adminer and every day I have to enable phpmyadmin and install adminer. Is there any way to permanently exclude these files from the check? My NAS is not exposed to the internet: it is protected by the firewall of the modem and from its own firewall.
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: After scan Malware Remover phpmyadmin has been stopped

Post by dolbyman »

Open a ticket with QNAP and ask why they treat adminer as malware (same as I said last year)
Post Reply

Return to “Web Server & Applications (Apache + PHP + MySQL / SQLite)”