Marcos

I could only suggest to try uninstalling ESET and installing the latest v13.2 from scratch using default settings. Failing this, please open a ticket with your local ESET support.

You should find out which devices have duplicate IP addresses and then determine the reason. Do they both have automatic IP address assignment by a DHCP server enabled or they have static IP addresses set?

I don't think that v7.3.2039.0 was released in Japan. I can check it with colleagues but I assume that v7.3.2039.1 was the first official release of the Japanese version.

The file is 0 bytes in size. Please check the size of the file on the disk.

Not sure what could be the problem, it's never been reported by users and for me it works alright:

Really weird. All previous license keys commence with RUAW- and were issued by ESET Russia. The last license which already expired was registered to "Матина В." and the email address ma.....9@mail.ru.

We have received a response from the Russian partner that they will refund you the license. Please collect logs with ESET Log Collector and upload the generated zip file here. If you could find your previous license (the one you "renewed" through the RU partner), please provide the public license ID. I was unable to find any license registered with your forum email address.

Unfortunately it is not clear what the problem is. You wrote that drive D : is infected. How do you know? Infected with what threat?

The trace log is stored in C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\trace.log. Before you upload it here, create an agent policy that will enable trace/debug logging. When applied, send a wake-up call to the client. Finally upload trace.log.

Please try configuring agent to log with trace / debug verbosity. After applying the policy, send a wake-up call to the machine and provide us with the agent trace log for perusal.

Try uninstalling ESET, running the ESET Uninstall tool in safe mode and installing the latest v13.2 from scratch.

That's really weird. Maybe attackers connected via RDP and installed the Russian version of our software to confuse you and to prevent you from understanding what settings they turned off or reconfigured in a way to allow malware to run. If you still have the Russian version installed, please collect logs with ESET Log Collector for perusal. We'll reach out to the Russian partner on this. I too don't believe that refunding the license would not be possible. Feel free to drop me a message if you don't get a refund within several days so that I can escalate the case then.

We kindly ask you to post in English in order for moderators and other users to understand you and be able to help. Do you mean ESET Internet Security for Windows or ESET CyberSecurity for Mac OS?

The Japanese partner releases their localized versions of ESET's products with a delay. Changes in the last version numbers indicate changes in localization or modules.

ARP cache poisoning may occur if a computer has more network adapters sharing the same IP address for load balancing or if there are devices with identical IP addresses in the network. If you trust the device, create an IDS exception for the detection. The same applies to the TCP port scanning attack detection; if it originates from a trusted devices and you know that it can scan remote ports for legitimate purposes, create an IDS exception.