this post was submitted on 16 Oct 2026
10 points (77.8% liked)

Selfhosted

63076 readers
699 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

My father owns a NAS by Synology. I have a sneaking suspicion that it might have been infected by some form of malware. I noticed for example it often increasing in overall and specifically fan noise at odd times and when nobody is using it.

What are tools I can use to scann it for unwanted intruders and if found get rid of them?

all 6 comments
sorted by: hot top controversial new old
[–] surewhynotlem@lemmy.world 13 points 3 days ago (1 children)

Synology?

SSH in and run top. See what it's doing. You could compare the checksum of the binaries that are running to make sure that they're the real binaries, if you really want to get into it.

But if I had to guess, it's either running a backup or re-running its indexing.

[–] Ebby@lemmy.ssba.com 8 points 3 days ago* (last edited 3 days ago)

I went down that rabbit hole too when I thought it should have been idle. Turned out it was routine data integrity checks and indexing.

Ages ago Synology used to have (maybe still does) a virus scan utility based on clamav (I thiiiiiink) and it only found windows viruses I had in spam emails on my Mac backups.

[–] Fuzzypyro@lemmy.world 3 points 3 days ago

Atop is pretty sweet for logging performance metrics over time and including data on what would have caused it with autosorting by effect of process included. Interface isn’t pretty and seems a little complicated on the surface but there are colors to help. That is if synology has repos to install it.

[–] tinsuke@lemmy.world 5 points 3 days ago

Could it be doing remote backup during downtime? That could be somewhat compute intensive, if the data is also being encrypted and compressed for the remote target.

Are there no ways to peek at running processes and resource usage on a Sinology NAS? I'd start with that.

Also, how old is the device? Maybe it is overheating due to dirt/dust buildup and some cleaning up and re-pasting would solve the issue.