This virus, at least the one I encountered was very nice and made me some backups. The original upgrade.cgi was renamed to upgrade2.cgi. so:
cd /usr/syno/synoman/webman/modules/ControlPanel/modules/
mv upgrade.cgi upgrade.cgi.bad
mv upgrade2.cgi upgrade.cgi
This restored update capability.