Antivirus on TS-669L not picking up viruses

Discussion about various official QPKG software applications. Login required to view the contents.
Post Reply
Budgie
Know my way around
Posts: 191
Joined: Wed Feb 27, 2008 7:57 am

Antivirus on TS-669L not picking up viruses

Post by Budgie » Sun Aug 02, 2020 12:15 am

I am getting reports from my firewall that Botnet/command-and-control traffic is being detected on both of my Qnap NAS devices.
Why is this not being detected and removed by the installed antivirus app please?

P3R
Guru
Posts: 12191
Joined: Sat Dec 29, 2007 1:39 am
Location: Stockholm, Sweden (UTC+01:00)

Re: Antivirus on TS-669L not picking up viruses

Post by P3R » Sun Aug 02, 2020 12:48 am

Budgie wrote:
Sun Aug 02, 2020 12:15 am
I am getting reports from my firewall that Botnet/command-and-control traffic is being detected on both of my Qnap NAS devices.
Why is this not being detected and removed by the installed antivirus app please?
There are three possible explanations.
  • The Qnap doesn't have any malware on it and it's a false-positive report from your firewall.
  • The antivirus app you have installed doesn't look for malware in the system itself, only malware in the stored user files (ClamAV).
  • The antivirus app you have installed doesn't have a signature for the malware you have.
So what antivirus app are you using? (ClamAV or McAfee)?

Are you also running the Qnap app called Malware Remover?
RAID have never ever been a replacement for backups. Without backups on a different system (preferably placed at another site), you will eventually lose data!

A non-RAID configuration (including RAID 0, which isn't really RAID) with a backup on a separate media protects your data far better than any RAID-volume without backup.

All data storage consists of both the primary storage and the backups. It's your money and your data, spend the storage budget wisely or pay with your data!

Budgie
Know my way around
Posts: 191
Joined: Wed Feb 27, 2008 7:57 am

Re: Antivirus on TS-669L not picking up viruses

Post by Budgie » Sun Aug 02, 2020 1:15 am

Hi and many thanks for the instant reply.
I am using the application which was installed by Qnap from the outset which is called "Antivirus."
Opening this points to Clanav.net so I assume that is what is installed.

I have not installed Malware Remover previously but have now done so and run it.
Nothing to report that I can see but I may have missed it.

P3R
Guru
Posts: 12191
Joined: Sat Dec 29, 2007 1:39 am
Location: Stockholm, Sweden (UTC+01:00)

Re: Antivirus on TS-669L not picking up viruses

Post by P3R » Sun Aug 02, 2020 1:30 am

Budgie wrote:
Sun Aug 02, 2020 1:15 am
Opening this points to Clanav.net so I assume that is what is installed.
Yes, that's the default. Then it's at least the second alternative. ClamAV don't search the Qnap itself for malware, only stored user files.
I have not installed Malware Remover previously but have now done so and run it.
Nothing to report that I can see but I may have missed it.
I don't know if the reporting have improved or if Malware Remover is still a black box not revealing anything.

If you have (or have previously had) any port forwarding (manual or UPnP) through your firewall from the internet to your Qnaps, then it's very possible that they are infected. I recommend that you isolate the Qnaps to your internal network only. Or if remote access is absolutely necessary then I recommend that you implement a remote access solution, preferably on your internet firewall/router.

Please contact Qnap support to get help with verifying your Qnaps are free from malware.
RAID have never ever been a replacement for backups. Without backups on a different system (preferably placed at another site), you will eventually lose data!

A non-RAID configuration (including RAID 0, which isn't really RAID) with a backup on a separate media protects your data far better than any RAID-volume without backup.

All data storage consists of both the primary storage and the backups. It's your money and your data, spend the storage budget wisely or pay with your data!

Post Reply

Return to “Official Apps”