Jump to content

I think Rootkit keep turning off feature in Eset Software


Go to solution Solved by Marcos,

Recommended Posts

I have some kind of virus/root kit which keeps disabling my web and email protection on Eset  Cyber security Pro.  This is after I have re-installed my Mac OS system.  I also think my router is affected as well as I have reset my router and contact the manufacturer of the router. 

In my Macbook, they installed a small picture of a Chess board with the name game on it.   And I didn't install that and it appeared after my web and email protection was turned off.  I ran Malwarebytes and it did not find anything.  I'm going to contact Eset cyber security tomorrow but this is worrying me a lot.  I don't know too much about computer just enough to know something is off.  Thanks.

Screen Shot 2022-03-30 at 10.07.19 PM.png

Screen Shot 2022-03-30 at 10.07.57 PM.png

Screen Shot 2022-03-30 at 10.08.22 PM.png

Link to comment
Share on other sites

Posted (edited)

I have attached the file that an admin mentioned above and MacOS is Monterey.   Thank you.   

 

Edited by Marcos
Url removed
Link to comment
Share on other sites

  • Administrators
  • Solution

Have you tried uninstalling ECSP and installing it from scratch? If that made no difference, try in with NordVPN temporarily uninstalled please.

Link to comment
Share on other sites

Thanks Macros for replying.  The Eset Security Pro had disabled the web and email protection in the past.  Because I did tried to install MacOS without the VPN at another location but something keep disabling those features after one or two hours.   I have tried to delete that Chess icon and it won't let me for a reason.  This was when my search engine switch to Google without me asking for it to be switch.  Because I've tried to stay away from all the mainstream companies and stuff. 

I will try again in the morning as I still think my router is infected by something.  A couple days back before resetting my router and both of my computers, I noticed that sites that I were visiting were being rerouted and I could not register my router to the manufacturer website by the correct date.   It was like a man in the middle attack.  Some kind of DNS cache poisoning.   I had to look it up because of limited understanding of what was happening to me.  That was when I started to notice that there was something wrong with my network in my house.  Thank you for helping me out. 

Link to comment
Share on other sites

Macros, it is all back in the green now after re-installing with my VPN.  I will observe it again to see if the web and email part is disable again without making any adjustment to my VPN.  Thanks.  I will keep you updated if it does get turn off again. 

Link to comment
Share on other sites

Marcos, I just logged into my computer just now and the Web and email part of Eset Security Pro is just disabled again and I did not change any other setting on my computer.  And I did not make changes to my VPN either.  And Eset keep asking me about "allowing new connection."

Link to comment
Share on other sites

Can you elobrate on this?  Are you asking for the license of this product?  They just attacked my Window's computer just now.   The Bios numbers kept flashing all kind of numbers and it felt like someone was taking over my desktop. I have both Eset for my Mac and Window's computer.  I just disabled my window computer and ran AVast rootkit just now. 

Link to comment
Share on other sites

5 minutes ago, Marcos said:

Does the problem with Web access protection return even if you keep NordVPN disabled for a few days? Please open a support ticket and provide logs as per https://support.eset.com/en/kb3404.

I have no idea.  This seems to be happening to my Macbook but my Window's desktop it is not disabled.  But I know they (hackers) have infected my Window's desktop as well.  For both my Macbook and WIndow's desktop, the same configuration.  I just ran a rook kit with AVAST on my Window's desktop and I got this message from it.  I couldn't clean it because I have to pay a subscription for their services.  Both of my licenses for Macbook and Window's are paid.  I'm logging in from desktop on this one just to upload the image files.   

Avast Scan.png

Link to comment
Share on other sites

2 hours ago, Gservant said:

I just ran a rook kit with AVAST on my Window's desktop and I got this message from it. 

I suspect this was a result of your VPN being also active on the Windows device? By definition, VPN's alter DNS servers being used.

Disable your VPN and run the rootkit scan utility again.

Link to comment
Share on other sites

Posted (edited)

Hi Itman, I have quit out of the VPN and ran the scan and it still show the same thing.   What I have noticed even in the past and this current VPN is that network device names were being changed.  When I was using my old VPN and my old router, I experience the same thing meaning I would rerouted to different regions and stuff.  That's why I bought the new router and reinstall the operating system on my desktop and Macbook.    Now, I can barely move my mouse cursor as if someone is taking charge of it.  I don't know how to explain it.  

And I have contacted my router manufacturer as it is a new router that I just bought within the past week.  I don't know to much about router but I do know that it logs but it logs the first day we update stuff on it.  I bought it just last week but the log was showing something being installed a month out. 

Thanks for the help.  When it comes to these things, I am a novice. 

Edited by Gservant
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...