QSnatch - Remove and Clean Your NAS of the QSnatch Malware

[@CoqueiroPVB]

Thank you for this video, it helped me a lot. Thanks

[@MikeFaucher]

Glad it helped! Thanks for the feedback!

[@CDubbClub]

Would it be a good or bad think to uninstall the cloudinstall portion of QNAP? I never intend to use cloud for anything and would like to know I have closed all the loopholes I can..

[@MikeFaucher]

Take a look at one of my other videos (I have several) on the topic (kzbin.info/www/bejne/qKW9ZJ6kmtWEkKc). It should help you lock things down. Some things cant be removed but they can be disabled. Hope this helps.

[@donsylvester5275]

Good vid Mike. Self-centered suggestion: Pls consider a vid on options to expand a QNAP NAS. My TS-251+ has 1.3 TB left of 4.0. No panic yet but QNAP seems to have intro'd a bunch of new options and I'd like your thoughts BEFORE I'm being pressured by nearly full NAS. Or maybe you'd suggest I just buy a new unit because of new features or power for streaming video ? Like to hear your thoughts/analysis.

[@MikeFaucher]

Will certainly add it to the list. What is your current drive configuration? What size/brand are your drives

[@donsylvester5275]

@@MikeFaucher 2 X 4TB WD Reds.

[@donsylvester5275]

And RAID 5 config.

[@MikeFaucher]

Thanks. I assume you mean RAID 1 as you need 3 drives for RAID 5.

[@donsylvester5275]

@@MikeFaucher Oops. Yes simply mirrored set up. I'll need to "replace or expand" and I'm keen to hear your inputs. I use my NAS 99% to store pics/vids. Also, on your suggestion, I have an old laptop as streaming device for online stuff and playing vids (VLC) to TV via HDMI.

[@ronpierce9034]

Mike - I am unable to install the Malware Remover from App Center by clicking on the icon or installing manually from app center install manually option. I downloaded the program from the website, but can't install it. I saw someone SSHing to install, but I'm not that sharp. When attempting to install, it just sits there and spins. Any ideas? Thanks,Ron

[@ronpierce9034]

PS I do have the latest FIRMWARE

[@MikeFaucher]

I would reach out to their support right away as something is definitely wrong. To make sure you are not infected, I would contact their support as they are pretty responsive. Also check that you are running the latest firmware by comparing yours to the one on the download site. Not being able to install the malware remover could be an indication of a problem. There are other reasons it may not install but let them determine if you have any type of infections first.

[@Bleudejade]

I realized I might have been infected when I ran Malware Remover yesterday and saw it stops after about 10 seconds. Now what do I do if I cannot run the app, nor can I remove and install it again? I read QSnatch does indeed prevent MR to work properly. I have an old NAS (219P II), so Security Councellor is not available for my system.

[@MikeFaucher]

Have you manually uploaded the latest firmware directly from their site? If your units do not accept the latest update there is not much you can do except remove the data and do one of two things, geta more current unit or factory reset and start over. As the reset will not prevent it from coming back, my suggestion is if you can't support the latest firmware version it may be time to upgrade. Not what you wanted to hear but it is the best way.

[@espaiz]

Hi, I think my old NAS is infected (TS-110) I can't run malware remover and I already updated to latest firmware. If I Reinitialize it and wipe everything, would that remove qsnatch? I only use it as a media server, so I won't loose anything important. Thanks

[@MikeFaucher]

Before you do that, remove and re-install the malware remover. If you have the latest firmware, you may just have a corrupt malware application. I would even try to do a manual install of the application before resorting to a wipe Also, make sure that you have checked on their web site that you do actually have the latest firmware just in case. To answer you original question, doing a full reinitialize will wipe out QSnatch along with everything else. Good luck.

[@espaiz]

@@MikeFaucher thanks for taking the time to answer. I'll try that.

[@MikeFaucher]

@@espaiz Good luck!