[Scan log question]

Hello,

After running a scan I checked the scan log and I see the following entries all shown in red. Are these anything I should be concerned about?

Any advice appreciated

Log
Scan Log
Version of detection engine: 26545 (20230107)
Date: 07/01/2023  Time: 14:58:23
Scanned disks, folders and files: Operating memory;Boot sectors/UEFI;WMI database;System registry;C:\Boot sectors/UEFI;C:\;D:\Boot sectors/UEFI;D:\
\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD - unable to open [4]
\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD.LOG - unable to open [4]
c:\windows\system32\windowspowershell\v1.0\powershell.exe  - unable to open [4]
c:\programdata\microsoft\windows defender\scans\history\cachemanager\96fff237-6e0a-4b3f-bda9-590542f37e23-0.bin - unable to open [4]
c:\windows\system32\windowspowershell\v1.0\powershell.exe  - unable to open [4]
c:\programdata\microsoft\windows defender\scans\history\cachemanager\96fff237-6e0a-4b3f-bda9-590542f37e23-0.bin - unable to open [4]
c:\windows\system32\windowspowershell\v1.0\powershell.exe  - unable to open [4]
 

C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat - unable to open [4]
C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm - unable to open [4]
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp - unable to open [4]
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache\V01.log - unable to open [4]
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat - unable to open [4]
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm - unable to open [4]
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCacheLock.dat - unable to open [4]
C:\Windows\appcompat\Programs\Amcache.hve - unable to open [4]
C:\Windows\appcompat\Programs\Amcache.hve.LOG1 - unable to open [4]
C:\Windows\appcompat\Programs\Amcache.hve.LOG2 - unable to open [4]
C:\hiberfil.sys - unable to open [4]
C:\pagefile.sys - unable to open [4]
C:\swapfile.sys - unable to open [4]
D:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} - unable to open [4]
D:\System Volume Information\{dcc7d171-d0df-11eb-9ea3-204ef6ef229e}{3808876b-c176-4e48-b7ae-04046e6cc752} - unable to open [4]
Number of scanned objects: 1560786
Number of detections: 0
Time of completion: 16:52:03  Total scanning time: 6820 sec (01:53:40)

Notes:
[4] Object cannot be opened. It may be in use by another application or operating system.

 

[Detected possible attack duplicate IP addresses on network]

I don't have a screenshot of the actual error as it hasn't happened since, but here is a screenshot of the log files from eset, hope this helps

[Detected possible attack duplicate IP addresses on network]

I received a notification from ESET today that there was a possible network attack whilst on my laptop, and that there was a duplicate IP address on the network, the IP address that was shown is that from my TV box that is also connected to my modem as I have TV and internet from the same provider. In the ESET logs it shows the ARP protocol for the attack. When I checked the IP addresses there was no conflict, my laptop and the TV box have different IP addresses so I don't understand why I got this message

Any advice appreciated 

[Detected possible attack duplicate IP addresses on network]

I received a notification from ESET today that there was a possible network attack whilst on my laptop, and that there was a duplicate IP address on the network, the IP address that was shown is that from my TV box that is also connected to my modem as I have TV and internet from the same provider. In the ESET logs it shows the ARP protocol for the attack. When I checked the IP addresses there was no conflict, my laptop and the TV box have different IP addresses so I don't understand why I got this message

Any advice appreciated

Sorry I posted this twice but could not figure out how to delete the post

[Eset firewall not initially activated]

15 hours ago, TomFace said:

You're probably OK. But as nothing in this world is 100% (including all A/V programs), you could always do a 2nd opinion scan. HitmanPro does offer a 30 day free trial (don't get the HitmanPro.Alert as it conflicts with ESET in my experience) or you could always try Emsisoft Emergency Kit (again another freebie).

thanks again, I ran a scan with Hitman Pro but it didn't find anything so I think it's ok

[Eset firewall not initially activated]

7 hours ago, TomFace said:

Welcome to "The Forum" Mike...glad you are here. Might I ask what OS and ESET product you are using? I use EIS and Win 7x64 and I have/had the same situation (for quite sometime now)...takes about 1.5-2 minutes for Win Security Center to fully realize ESET is on board and functioning. What I have done is to adjust my Network settings to NOT automatically connect. After I see everything is registered properly (via Action Center>Security) , I then manually connect. Not a big deal for me. This also allows me to be disconnected (from the Net) when I choose to.

Is that the way it should be? I'm not sure, but (again) it's not a big deal for me.

Best regards.

 

thanks for the replies, I am also using Eset Internet Security and win 7 x64. I have since reinstalled EIS and I notice now that the firewall is activated as soon as windows starts, I was thinking that EIS had maybe been compromised, I have scanned my pc twice but no problems were found so not sure

Regards

Mike

[Eset firewall not initially activated]

Hello,

I noticed that when I start my pc the firewall is not initially activated, after startup it takes a good 2 minutes before it is activated, is this normal?

Mike