Cannot disable TrendMicro scan in 380.68_2

[AndreiV]

Once again: asking the questions please be noted I never used this feature and have no idea where to find details about it.
So: where could I find the date of signatures?

It is right next to the signature version and update check button.

 

[gjf]

Excuse me - but are you trolling me?

 

[Jack Yaz]

Excuse me - but are you trolling me?

 

[gjf]

Asus RT-AC87U

And I am talking about AC-RT68U.

 

[Jack Yaz]

And I am talking about AC-RT68U.

I'm pretty sure the model would make no difference to this particular page, but I could be wrong.

 

[gjf]

In any way - I cannot find another explanation why the situation is different.
And I still wonder why TrendMicro module is active when it should not be.

 

[RMerlin]

Signatures have nothing to do with malicious website blocking, that is entirely handled by the cloud-based WRS service. Signatures are used for traffic detection, used for Adaptive QoS or for infected device detection.

 

[gjf]

But why this module is working being disabled?
And why I am expecting problems - and other users not?

 

[RMerlin]

Are you sure you didn't enable the old Trend Micro Ad blocker? That warning message seems to indicate that it's blocking the page because of that category (which matches what's on the WRS site):

 

[RMerlin]

See what these return:

nvram show | grep wrs_

 

[gjf]

Please also pay attention the behaviour was changed slightly when updating from 68_2 to 68_4.

 

[gjf]

wrs_mail_bit=6
wrs_cc_enable=0
wrs_vp_enable=1
wrs_enable=1
size: 58126 bytes (7410 left)
wrs_adblock_popup=1
wrs_rulelist=1>78:E4:00:FB:F6:EA>1,2,3,4,5,6,8,9,10,14,15,16,25,26,11>>57><1>30:10:B3:02:5B:2C>>>>
wrs_adblock_stream=1
wrs_app_rulelist=1>78:E4:00:FB:F6:EA>22>21>1>8<1>30:10:B3:02:5B:2C>>21>>
wrs_mals_enable=0
wrs_app_enable=1

 

[gjf]

If wrs_adblock_popup=1 means this crap is really enabled - how to disable it?
There is no UI item, should I put some changes into nvram manually?
If so - please let me know what to change.

 

[doczenith1]

I'm running 380.68_0 with all AiProtection features turned on and the site loads fine for me.

Also note that the date on the Trend Micro Signature Version does not always update. I just checked and was on 1.180 with an updated date of 2017/08/04. I hit the check button and it found a new signature version and installed it. New values are: 1.184 Updated : 2017/08/04 13:50

 

[RMerlin]

If wrs_adblock_popup=1 means this crap is really enabled - how to disable it?
There is no UI item, should I put some changes into nvram manually?
If so - please let me know what to change.

nvram set wrs_adblock_popup=0
nvram set wrs_adblock_stream=0
nvram set wrs_enable=0
nvram commit
reboot

Those were documented at the time the feature was removed from the firmware. A factory default reset would have worked as well.

 

[gjf]

RMerlin, thank you for your help.
Unfortunately I didn't see such recommendation in installation guide to some update of your firmware. Possibly it is my mistake.
Anyway the problem is fixed now.