Virus

[Mike Zahorik]

I have been using freeNAS for a long time. I have an AMD 64 computer with 2, 2tb drives on it. Never had any trouble until now. I have a virus on it and can not get rid of it. I have WebRoot on a WIN7 machine and can scan the freeNAS with it. I find 5 virus and says it gets rid of them but it they come back. I'm wondering is there an anti virus for the freeNAS? Also maybe I should upgrade the BSD? I am running FreeNAS 8.3 Thanks Mike

 

[pschatz100]

Your post does not make any sense. Webroot web site says they support PC's and Mac's. Why do you think you can run it on a FreeNAS machine? Anyway, I don't think there are any viruses that have been reported that would affect a FreeNAS machine. I don't know what webroot is reporting, but I doubt it is anything of concern.

Of course, if there are vulnerabilities in the old FreeNAS version that would affect you, updating to a more modern distribution would be helpful. However, you are on such an old version of the software that I would make certain I have good backups before doing anything else.

 

[winnielinnie]

I have WebRoot on a WIN7 machine and can scan the freeNAS with it.

If anything, it's probably detecting Windows malware that you copied over to the FreeNAS server via an SMB share.

This doesn't meant your FreeNAS/FreeBSD system "has a virus."

As @pschatz100 mentioned above, you're running a very old version of FreeNAS, and to hop to TrueNAS Core 12 might be an endeavor. Make sure you have backups, and you export your config, and be willing to re-do your preferences and shares all over again.

 

[Mike Zahorik]

I'm sorry if I was not clear, being an old man (closer to 100 than 50) I find that once in a while I'm not clear. I have a freeNAS 8.3 freebsd system on a AMD 64 8gb memory with two 2 gByte drives. I use it for storage on a network of Windows machines. You are most likely correct that the virus is in the storage area and not on the freeNas system. I have the freeNas mapped to the Windows machines and I can scan a mapped drive from my Win7 WebRoot machine. Even though WebRoot finds and attempts to rid the virus it keeps coming back. I'm wondering if the virus is removed from one drive but survives on the mirrored drive? Or maybe something else?

My latest idea was to backup all my files to a (or more) USB devices. Then scan them on the Win7 machine to get rid of the virus. Reformat the freeNas drives then copy me files back to the freeNas. I have to purchase some external drive to save all the files. Another problem is I'm not sure of how to reformat the freeNas drives, other than remove them from the freeNas machine and install them in the Win7 machine.

I see the FreeNas is up to version 11 something. What are the benefits of upgrading? I also see that there are plugins, ClamAV that maybe of value? I appreciate your help, thanks for replying, Mike

 

[Mike Zahorik]

I have just finished backing up my files. Currently, I'm running virus checks on them to be sure that they have no problems. I figure I have two choices, 1. format the FreeNas drives copy my files back to the FreeNas and reuse my 8.3 system or 2. download the new FreeNas set up the machine and then copy my files back.
I'm leaning toward reusing the 8.3 system. It works fine as is. The new system would require setting it up and there is the possibility of me making an error and losing data. I think a better approach would be to find a different 64 bit desktop machine and setting it up with the new FreeNas. That way I can test, make errors and maybe succeed without worry about data loss. Thanks, Mike

 

[sretalla]

Perhaps the way to approach it is to not run any kind of (file sharing) connection to the FreeNAS machine from Windows and rather connect using Putty or FileZilla or WinSCP so you can see the files on the FreeNAS host, then delete them directly.

After that, consider scanning the Windows machine independently (as it may be the infected machine that is putting the infections back).

 

[Mike Zahorik]

That is interesting. I have scanned all my windows machines and have determined that they are virus free, at least right now. I have backed up all my files from the freeNas to a windows HD and have scanned that also. So I believe that my windows stuff is OK.
I'm a little unsure of how to use Putty, FileZilla or WinSCP to look at the files in my freeNAS. I have used Putty to access Raspberry PI's and used WinSCP one time for something, but do not remember what I was doing. I use FileZilla to upload to my website.
I just tried FileZilla and can see the FreeNAS files. I'm sure I can delete files this way. Why would this be better than deleting files over the mapped drive on Windows? Thanks for the help, Mike

 

[Mike Zahorik]

Looks like I have this virus beat. The old 8.3 FreeNAS is working fine and I have scanned it a couple of times and there are no problems on it. I'm going to keep my eyes open for a used 64 bit computer with 16 Gb memory and set it up as a 11.2 freeNas. Mike