gary_seven

itman - Thanks for your simple and logical solution. Since deactivating NI, haven't received any alerts. I, too, will leave this disabled.

itman - almost an hour and no alerts with NI disabled. Next steps?

Disabled NI, rebooted and waiting to see if any alerts (5 mins after reboot and no alerts so far).

Marcos- Well, I'm confused... As you suggested, I disabled NI - waited > 1 hour - NO HONEYPOT access alert. Yahoo! So, re-enabled NI - waited > 1 hour - still no honeypot access alert. Strange; Expected them to start again. Just to satisfy my own curiosity, I rebooted my laptop and, unfortunately the alert was sent again. So, I'm still suspecting that I either have (A) a deeply hidden piece of malware OR (B) it truly is a problem with NI, is there any type of scan from ESET that I can perform to rule out option A (a deeper scan than what ESET Smart Security Premium provides?

(Duh) Great suggestion! I'll disable it now and see.

Marcos - Thanks for your quick response. As mentioned, these honeypot access alerts are being sent hourly - something is accessing them on an ongoing basis, and the only identifier on the router is that it's my laptop. I am not / did not do a network scan via NI. Is there any sort of ESET "deeper" scan that I can do to check my laptop (I've already done Smart Scan, In-Depth Scan, and Computer Scan). I'm concerned that there may be something lurking. One other thing I'll try is to wait for the next alert and then check my Windows logs to see if something coincides.

Am pulling (what's left of) my hair out with this. I am running ESET Smart Securiy Premium on all my home devices (with no problems). My home network uses a Ubiquiti UDM router. I've configured the UDM with honeypots on all of its VLANs. -- Everything runs fine EXCEPT I keep receiving honeypot alerts from the UDM (approximately EVERY hour) stating MY PC triggered it. I've run dozens of scans (ESET, Malwarebytes, others) on my PC and consistently come up clean. So, I'm thinking that MAYBE (hopefully?) there's some background ESET process that's automatically running (hourly) and scanning my network. Is there? Any and all help appreciated.

https://www.uptycs.com/blog/what-is-meduza-stealer-and-how-does-it-work From the article: "What's more concerning is that a large portion of antivirus software has proven ineffective against the Meduza stealer binary, either failing to detect it statically or dynamically. (Fig. 2, Fig. 3)." Fig.2 – Static AV scan report Fig.3 – Dynamic AV scan report

@peteytSorry - I took the easy way out and chose "forgot password" to reset it.

Thanks for checking. I'll chalk it up to a local pc issue.

I seem to be having an issue changing my password on the user forum. Regardless of the size or complexity of the password I choose, I get an error "Sorry, there is a problem Something went wrong. Please try again." Anyone else seeing this?