Nightowl

Yes also nod32 antivirus will detect the same threats , but it has less features , same as internet security , that makes smart security the one with the most features for home edition LiveGuard is meant for never seen before files to be uploaded to ESET's sandbox in cloud and then wait for an answer if the file is safe or not , it will not initiate on threats that already have detections

Try to move the installer to a different folder that isn't shared , like a local drive.

https://support.eset.com/en/kb2155-error-notifications-in-computer-scan-log

Better to keep ICMP disabled or only enabled to Local Network, There is no need for opening ICMP and have your address pinged by bots if there is no need for it. Unless you are offering some public service/server or something similar , other than that , it's better to keep it blocked.

It's more better to bring a firewall or Windows Firewall to whitelist to certain IPs or a VPN IP to connect from to eliminate all the attacks, If it's not possible to do so , then using a firewall like pfSense , OPNSENSE , Fortinet , Palo-Alto etc... , can help take off the attacks with their intrusion prevention services that would block the attacks on the firewall level not the server level which is making the CPU run more and also might bring your server down , or with bad luck a breach could happen.

ESET staff will request logs from those computers to understand more for sure, But have you scanned those computers? Deep Scan? I believe those sources PC are infected somehow , some attempts are at port 139 which is before Windows 2000 I am not mistaken according to Google, after that Microsoft switched to 445 And 2 attempts are being tried as IPV6 , that's not usual for a human to do so , should be bot attempts. Each have around 5-7 minutes of waiting time before the next try (unless ESET is dropping the attempts or blacklisting the IP for a bit of time) Sounds like what you are having , but it can be something else , not specifically WannaCry But your computers are acting like Infected ones.

Pre-launch is for testing purposes , most users are set to regular updates Pre-launch is given to users who changed the update settings to Pre-launch so they can test the modules before they are publicly released to all users, they tend to do that to minimize problems , because if there was a new module and it was released straight to regular and for example it had a problem , it would impact all ESET users Pre-launch can save ESET from situations like this.

Is this what you mean? I believe not being able to uncheck it is not caused by ESET , it can be your User's permission in Windows.

If ESET is still giving detections and communications to the IP that was logged at port 80 , then it's not blocked , because the communication has been made and ESET has blocked/dropped it as suspicious botnet activity , blocking the IP totally for all ports can help prevent further communications to the botnet server.

Block the IP also that is shown on the detection to prevent it from communicating again after doing Marcos' instructions

I doubt so, they just need your last connection/download to the update servers and that's it

According to the email content , they look at which update database you currently have and according to that they send these emails , most probably Second opinion scanners can be like : HirmanPro , RogueKiller , Windows Defender (All can run as second opinion scanners without any real-time components).

ESET can detect them if you enable detecting of unsafe applications, indeed some may be malicious modified versions of KMSPico by malware makers , but the original one isn't harmful , so I believe the detection by ESET is true, it is not malware , but an unsafe application

You can hide it not to show you when there is trouble to update , but anyway that is normal behaviour from Windows and it's expected all applications to give back a message that there is no internet to do their job Since ESET will attempt to update instantly when it's possible for it.

Use uBlock origin for your browser (Firefox/Chrome).

Dark theme is too much dark indeed , it's hard on the eyes, the black is too much black and dark.

I found the same question on Microsoft Forum : https://answers.microsoft.com/en-us/windows/forum/all/how-to-stop-sharing-folder-for-windows-10/886a91aa-da0c-4d52-9895-56f2de9c6341 And about Public Desktop , it's if you have multiple users on the same computer , whatever you add to the Public Desktop will appear to every user's desktop in your PC For example if you add a .TXT file to Public Desktop , it will on every user's desktop.

No use them as scanners only (not real-time) , same as windows defender if you want it to scan , there is an option for it to scan without running as real time And it's true if there are 2 antivirus running as real time in the same time they will conflict with eachother and start giving false positives

I never had any trouble with ESET , knocks on the wood , everything it has catched properly , for sure there is no antivirus that will do 100% protection because that is impossible If you still need a second opinion scanners to make sure that your ESET isn't missing something you can try to run Windows Defender manual scan , or try second-opinion scanners like RogueKiller and HJitmanPro.

Your ISP can do that changes if your router supports it for sure. If your NOD32 isn't flagging anything and you are also scanning deep scan, and finding nothing , most probably you are safe , if you want to make sure , you can use windows defender manual scanning(not real time) to have a second opinion scanner or some other scanners like HitmanPro or RogueKiller which are second opinion scanners that can find something.

If there is an attack on your PC , it should be blocked by Windows Firewall , but looking at Windows Firewall logs it cannot really help you know if this is an attack or simply normal work of the firewall ESET can help you more with this by telling you exactly how most probably you are being attacked, but if your antivirus isn't flagging/detecting things , most probably you are good Add an adblocker like uBlock origin, can help you throw most of ads and pop-ups Another example is , some routers now provide a Guest WIFI , mostly those WIFI networks , are made separated from the normal network , which devices in the GUEST WIFI cannot communicate with another devices in LAN or normal WIFI , and also possible to set it to prevent communications between devices inside the network.

Some kind of malware like Worms can spread through network from the infected PC Sometimes if the PC is on different subnet and it's not possible for it to communicate to another subnet in the same network then it won't be able to spread because it's inside a different subnet other than the other devices for example. If I am not mistaken , nod32 antivirus doesn't include network attack protection , it's only available in smart security and internet security

When you scan for malware in regular mode , ESET should show where the malware is being detected , try to head into safe-mode and remove it manually , keep doing so till you remove all the malware remnants, should be good after.

Without the VPN , can you make connection to LiveGrid?

The program seems to be useless, but for sure in background it's doing some weird things , like send user data and stuff like that, what makes it more annoying that it will keep reinstalling itself even if you uninstall normally from the uninstall file.