Search help content

ESET Internet Security – Table of Contents

Notifications | Network Inspector

Breadcrumbs

ESET Online Help > ESET Internet Security > Working with ESET Internet Security > Tools > Network Inspector > Notifications | Network Inspector

Copy current article URL Share via email

This article (PDF) Whole documentation (PDF)

Network Inspector scans your local network for potential issues, such as insecure router settings, weak passwords, or malware affecting network devices.

Below are several notifications displayed by ESET Internet Security when it detects vulnerability issue on your router. Click the respective notification for guidance to minimize the vulnerability risk of your router.

If you are not familiar with router changes, consult your router manufacturer or internet provider.

Potential vulnerability found—Your router may contain known vulnerabilities that could make it easy to attack and exploit. Update your router's firmware.

To update your router's firmware:

1.Log in to its web interface by entering its IP address (often 192.168.1.1 or 192.168.0.1) into a browser.

2.Navigate to Advanced, Administration or System tools, locate the Firmware upgrade option and check for updates.

3.Use a wired Ethernet connection to prevent interruptions.

Threat found—Your router is infected by malware. Restart your router and repeat the scan.

If your router is infected with malware, perform the following steps:

1.Immediately disconnect it from the internet or unplug the router from the power source for 60 seconds to stop malicious activity.

2.Perform a factory reset by holding the reset button for 10-30 seconds.

3.Check the manufacturer's website for the latest firmware to patch the vulnerability.

4.Log in to the router's web interface by using the default settings after reset, and create a strong, unique administrator username and password.

5.Change the default Wi-Fi network name (SSID), enable WPA2 or WPA3 encryption, and disable Remote management/access to prevent hackers from controlling the router via the internet.

Weak router password—The password on your router is weak and can be easily quessed by someone else. Change the password in your router.

If the password on your router is weak, perform the following steps:

1.Set the encryption type to WPA3 or WPA2-AES (WEP or WPA are considered insecure).

2.Create a strong, unique administrator username and password (often the default is admin/admin).

Malicious network redirection—Your internet traffic appears to be redirected to malicious websites. This can mean your router is compromised. Change the DNS server setting in your router.

Immediate actions

1.Close the browser tab or window immediately.

2.Do not enter any personal information.

3.Disconnect from the internet (unplug Ethernet or turn off Wi-Fi).

Fixing the redirection step-by-step

1.Run a full, deep scan using ESET Internet Security to detect and remove any malware.

2.Open your browser's extension manager (e.g., chrome://extensions) and remove any extensions you do not recognize or that were installed before the issue started.

3.Reset the browser to its default settings to remove any hidden changes to your homepage, search engine, or new tab page.

4.Type cmd in the search bar, right-click Command Prompt, and select Run as administrator. Type ipconfig /flushdns and press Enter. You should see the Successfully flushed the DNS Resolver Cache confirmation.

Preventive measures

1.Keep your browser and operating system up to date to prevent attackers from exploiting vulnerabilities.

2.Using a Virtual Private Network makes it difficult for attackers to intercept and redirect your traffic.

3.Avoid clicking on suspicious links and be wary of free software that can contain malicious code or unwanted applications.

Open network services—Your router runs network services that may be exploited by others. This can be due to poor configuration or a compromised router. Check your router's configuration.

If your router is running network services that may be exploited by others, follow these steps to secure your network:

1.Access your router's admin panel to look for any new users or changed settings.

2.Regularly update your router's firmware to close security vulnerabilities.

3.Change your router's default admin password and Wi-Fi password to prevent unauthorized access.

4.Turn off any remote management features to limit access to your router.

5.Create complex passwords that mix letters, numbers, and symbols.

6.Enable and set up a firewall on your router.

7.Use a router with security features like WPA3 or WPA2 encryption.

Sensitive open network services—Your router runs sensitive network services that may be exploited by others. This can be due to poor configuration or a compromised router. Check your router's configuration.

If your router is running sensitive network services, it is crucial to take immediate action to secure your network. Here are some steps you can take:

1.Ensure your router's firmware is up to date. If not, update it immediately.

2.Log in to your router's administrator page to check its DNS settings. If they are pointing to unfamiliar IPs, change them immediately.

3.Review your router's configuration to ensure it is not running any unnecessary network services that could be exploited.

4.Monitor your network for any signs of unauthorized access, such as slow internet speed or login failures.

5.Use traffic filtering at the router level to block malicious traffic and prevent unauthorized access.

Firmware outdated—The firmware on your router is outdated and may contain vulnerabilities. Update the firmware on your router.

To update your router's firmware:

1.Log in to its web interface by entering its IP address (often 192.168.1.1 or 192.168.0.1) into a browser.

2.Navigate to Advanced, Administration or System tools, locate the Firmware upgrade option and check for updates.

3.Use a wired Ethernet connection to prevent interruptions.

Malicious router setting—This DNS server that your router uses is malicious and may send you to dangerous websites. This can mean your router is compromised. Change the DNS server setting in your router.

If you suspect that the DNS server your router is using is malicious and may send you to dangerous websites, follow these steps to mitigate the risk:

1.Log in to your router's administrator page to check its DNS settings. If they are pointing to unfamiliar IPs, change them immediately.

2.Websites like https://www.dnsleaktest.com/ can show you which servers are resolving your queries. If you see unexpected IPs or ISP-branded resolvers, that is suspicious.

3.Ensure your router's firmware is up to date.

4.Enable DNSSEC validation to verify the authenticity of DNS records.

5.Use a VPN.

Network services—Your router runs common network services. These are needed by the network and are probably safe. Check your router's configuration.

If your router is running common network services and you received the Check your router's configuration notification, it is likely due to outdated firmware or potential security vulnerabilities. These are the steps you can take to address this issue:

1.Ensure your router's firmware is up to date.

2.Regularly review your router's settings to ensure they are configured correctly so your network is not exposed to vulnerabilities.

For more tips on how to secure your home network, see the following article.

˄˅