Andrei-I 0 Posted yesterday at 07:29 AM Share Posted yesterday at 07:29 AM Hello, The trojans in my system keep being recreated despite Eset finding no issues. I have checked the Network Inspector and found that some connections are blocked. Could these be a sign of an infected router? Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 5,267 Posted yesterday at 08:48 AM Administrators Share Posted yesterday at 08:48 AM Were the trojans detected by ESET? If so, could you please post the appropriate records from the Detections log? Quote Link to comment Share on other sites More sharing options...
itman 1,746 Posted yesterday at 01:02 PM Share Posted yesterday at 01:02 PM Is IP address, 192.168.1.1, your router/gateway or is it your PC network address? Quote Link to comment Share on other sites More sharing options...
Andrei-I 0 Posted yesterday at 04:28 PM Author Share Posted yesterday at 04:28 PM 3 hours ago, itman said: Is IP address, 192.168.1.1, your router/gateway or is it your PC network address? This is my gateway, I suppose. Quote Link to comment Share on other sites More sharing options...
itman 1,746 Posted yesterday at 07:01 PM Share Posted yesterday at 07:01 PM 11 hours ago, Andrei-I said: I have checked the Network Inspector and found that some connections are blocked. First, to run the Eset Network Inspector tool, your Eset existing set up network connection profile must be set to Private mode. The Eset network connection profile assignment by default is set to Automatic. This in turn defers to the current Windows firewall profile which is set to Public by default. Open Eset GUI and check your Eset network connection and verify that Connection profile is set to Private. If not, manually set the connection profile to Private. Next, go to the Tools section and select Network Inspector. Now select the Scan your network tab. Eset will proceed to scan your network and devices for network vulnerabilities. The scan will run for a while. When the scan completes, Network Inspector will either show; 1. No vulnerabilities found or; 2. What network devices have one or more vulnerabilities associated with them. Finally, reset Eset network connection back to Public if that was its initial setting. Ref.: https://help.eset.com/essp/17/en-US/idh_page_homenetwork_protection.html Quote Link to comment Share on other sites More sharing options...
Andrei-I 0 Posted 11 hours ago Author Share Posted 11 hours ago On 9/25/2024 at 11:48 AM, Marcos said: Were the trojans detected by ESET? If so, could you please post the appropriate records from the Detections log? At the moment nothing is shown in scans, but the last time was this: Could this be connected? Quote Link to comment Share on other sites More sharing options...
Andrei-I 0 Posted 10 hours ago Author Share Posted 10 hours ago 17 hours ago, itman said: First, to run the Eset Network Inspector tool, your Eset existing set up network connection profile must be set to Private mode. The Eset network connection profile assignment by default is set to Automatic. This in turn defers to the current Windows firewall profile which is set to Public by default. Open Eset GUI and check your Eset network connection and verify that Connection profile is set to Private. If not, manually set the connection profile to Private. Next, go to the Tools section and select Network Inspector. Now select the Scan your network tab. Eset will proceed to scan your network and devices for network vulnerabilities. The scan will run for a while. When the scan completes, Network Inspector will either show; 1. No vulnerabilities found or; 2. What network devices have one or more vulnerabilities associated with them. Finally, reset Eset network connection back to Public if that was its initial setting. Ref.: https://help.eset.com/essp/17/en-US/idh_page_homenetwork_protection.html The scan came out clear, but I don't recognize the last device in the list, which connected yesterday: guangzhou shiyuan electronic technology company limited - possibly a printer? Quote Link to comment Share on other sites More sharing options...
itman 1,746 Posted 9 hours ago Share Posted 9 hours ago 1 hour ago, Andrei-I said: The scan came out clear Appears you are using OpenWRT as your router. Note that there have been multiple security vulnerabilities associated with older versions of it. Ensure you are using the latest version of it. Ref.: https://openwrt.org/docs/guide-developer/security Quote Link to comment Share on other sites More sharing options...
Andrei-I 0 Posted 9 hours ago Author Share Posted 9 hours ago 22 minutes ago, itman said: Appears you are using OpenWRT as your router. Note that there have been multiple security vulnerabilities associated with older versions of it. Ensure you are using the latest version of it. Ref.: https://openwrt.org/docs/guide-developer/security What would you say about the last device I sent on the screenshot? Quote Link to comment Share on other sites More sharing options...
itman 1,746 Posted 9 hours ago Share Posted 9 hours ago (edited) 16 minutes ago, Andrei-I said: What would you say about the last device I sent on the screenshot? Quote Check For All Connected Devices On Windows, MacOS, and Linux Let’s understand how you can check for connected devices on various OS i.e. Windows, macOS and Linux using three different methods: Method 1: Check Unknown Devices Using Router’s Web Interface: Open a web browser and enter the router’s IP address. Log in with credentials. Navigate to the “Device List” or “Connected Devices” section. View a list of connected devices with detail https://www.geeksforgeeks.org/identify-unknown-connected-devices/ Edited 9 hours ago by itman Quote Link to comment Share on other sites More sharing options...
Andrei-I 0 Posted 8 hours ago Author Share Posted 8 hours ago 16 minutes ago, itman said: https://www.geeksforgeeks.org/identify-unknown-connected-devices/ Thanks, turns out it was my home TV as once I turned it on, the name changed to the TV name. Thanks for all your help. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.