Malware alert help

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
User avatar
damian_g
Starting out
Posts: 11
Joined: Wed May 04, 2016 7:18 pm
Location: Chicago

Re: Malware alert help

Post by damian_g » Mon Sep 02, 2019 12:18 pm

same here:

"Warning 2019/08/29 21:39:09 System 127.0.0.1 Malware Remover Malware Removal [Malware Remover] Removed high-risk malware. Change all user account passwords immediately, update QTS and all applications to the latest versions, and restart the NAS.
"Warning 2019/08/29 21:39:09 System 127.0.0.1 Malware Remover Malware Removal [Malware Remover] Removed high-risk malware. Restart NAS and update all apps in 'App Center' > 'My Apps' > 'Install Updates'"

All my apps were already on the latest versions. I opened a ticket with support but I haven't heard anything back yet. I've been on QTS 4.3.6.0993 since it was released in July...

D
SSDD

FSC830
Starting out
Posts: 16
Joined: Thu Mar 03, 2016 1:11 am

Re: Malware alert help

Post by FSC830 » Mon Sep 02, 2019 4:01 pm

Just my experience:

Sunday night my backup NAS (TS859, latest v4.2.6) powers on, did running all backup jobs and -no surprise - reports the "high risk malware detected..." message.
To still curiousity I isolated my 2nd backup NAS (same model and FW, same apps) via a switch and connected a PC. Afterwards I did power on, wait a hour and power off the 2nd NAS several times, as expected without any message.
Finally I connected the 2nd NAS back to the LAN and did a power on: same result as NAS#1, "high risk malware...."
At both NAS an application update was reported for music station and photo station, even this apps have been disabled!
After updating both apps the malware alert did not occur again.
Because I do not use these apps I deinstalled them.

My suspicion: any outdated app will be reported as a "high risk malware". Annoying, that MR does not provide any detailed information about the suspected malware.
And more annoying that QNAP causes a lot of puzzled and scared users... I am for sure they will never earn a "heros at work" award! :twisted:

So stay calm if any MR messsage appears. Do not ignore such messages, but think about the possibilty and if there is more evidence for a malware. :?

regards

sinlogik
First post
Posts: 1
Joined: Mon Sep 02, 2019 9:36 pm

Re: Malware alert help

Post by sinlogik » Mon Sep 02, 2019 9:39 pm

I've uninstalled and reinstalled Malware Remover and rebooted my NAS, but I still get this message. All my apps are up-to-date as well. Is anyone else still getting this error after following what QNAP recommends to remove this message?

I've opened a ticket with QNAP as well on this issue.

rpfleging
Starting out
Posts: 17
Joined: Wed Aug 03, 2016 7:43 am

Re: Malware alert help

Post by rpfleging » Mon Sep 02, 2019 10:54 pm

TS-451+ 4.3.6.1040 (20190820)
The first scheduled run after the firmware update I got the same message. I rebooted and all has been well since. I expect as others that the firmware update had some issues since it is not available on the website. My question is should I roll back to 4.3.6.0993?

FSC830
Starting out
Posts: 16
Joined: Thu Mar 03, 2016 1:11 am

Re: Malware alert help

Post by FSC830 » Tue Sep 03, 2019 8:25 pm

As long as you do not encounter any problems with this version - keep it.
Other users reported they have had trouble with SMB connections and have been forced to downgrade to fix their issue.
But if all is running in your case there is no need for a downgrade.

Regards

homeuser2019
New here
Posts: 5
Joined: Thu Aug 29, 2019 10:41 pm

Re: Malware alert help

Post by homeuser2019 » Tue Sep 03, 2019 8:35 pm

Well, looks like I spoke too soon. Over the weekend the same "malware" notification popped up on my NAS again

Noticed there is an update for the cloud backup sync app this morning, updated it and ran another scan just a second ago. No notifications/errors

dr_jon
Know my way around
Posts: 222
Joined: Thu Feb 10, 2011 10:03 pm
Location: West London

Re: Malware alert help

Post by dr_jon » Wed Sep 04, 2019 4:54 am

Rather annoyingly the ticket I started for this has disappeared. It isn't in the list of open or resolved tickets... the direct link they sent me for it gives:
"Sorry, we couldn't find the ticket you requested or you do not have permission to view it."
Seems distinctly unprofessional... unless I'm missing something... which seems unlikely as my old issue is still in the resolved list, so presumably I'm all logged in okay.
TS-453A, TS-253A, TS-419P+, not a fan of the new network config app...

Turbo_112
Starting out
Posts: 12
Joined: Wed May 07, 2014 2:26 am
Location: The Netherlands

Re: Malware alert help

Post by Turbo_112 » Thu Sep 05, 2019 4:07 am

I have the same notification with the malware.
But the log is strange. Only a malware scan after booting the Nas gives the errror.
A scheduling scan after a boot-scan didn't give the notification in the logs. Then its clean, but after restart there is the notification again.

Proggie
Starting out
Posts: 32
Joined: Tue Nov 02, 2010 9:56 am

Re: Malware alert help

Post by Proggie » Thu Sep 05, 2019 4:09 am

Turbo_112 wrote:I have the same notification with the malware.
But the log is strange. Only a malware scan after booting the Nas gives the errror.
A scheduling scan after a boot-scan didn't give the notification in the logs. Then its clean, but after restart there is the notification again.
That's how it was for me too. I removed the malware app and reinstalled it and now no longer get the warnings.


Sent from my iPhone using Tapatalk
TS-419P 4.3.3.0998

User avatar
damian_g
Starting out
Posts: 11
Joined: Wed May 04, 2016 7:18 pm
Location: Chicago

Re: Malware alert help

Post by damian_g » Thu Sep 05, 2019 9:03 am

i just did the recommended reinstall and no more warnings. I did not reboot...
SSDD

robert_m_muench
Getting the hang of things
Posts: 87
Joined: Mon Feb 12, 2018 9:26 pm

Re: Malware alert help

Post by robert_m_muench » Fri Sep 06, 2019 4:02 pm

Besides that I have the same problem, I'm really ** how QNAP handles security problems and how they try to mitigate them.

This MR tool sounds like a good joke to me... instead of spending time on such a naive approach, either get some OS tools onboard that can scan systems (there are some) and harden the QTS system by default. No new features only focus on hardening this thing. That would help much more.
TVS-1282T3
CPU: Intel Core i7-7700 CPU @ 3.60GHz
Memory: 64 GB
2 x Samsung SSD 850 EVO M.2 1TB (M.2 SATA)
2 x Samsung SSD 860 EVO 2TB (SATA)
4 x WDC WD6002FFWX-68TZ4N0 (SATA) (6TB)
4 x Seagate ST12000VN0007-2GS116 (SATA) (12TB)

Post Reply

Return to “Miscellaneous”