Page 1 of 1
| Virus scanners for connected devices 27/04/2023 at 19:57 #151552 | |
Peter Bennet
5402 posts |
Hi, I've been told by Virgin Media that some third party has detected a piece of Malware on an unspecified device using my internet connection. Rather unhelpfully they can't point at which device. We have Norton AV on most computers/phones and have run various scans. However, it occurred to me that we have other devices connected to the system such as solar inverter, car charger and even the car and I was wondering how I could scan them for malware. I've asked Norton and they can't help; I have also emailed the manufacturers but as they are based overseas their replies are not always the clearest. Anyway, I thought I'd see if anyone here might have some insight into how these things work. Ideally, I'd want to be able to scan the devices but a fallback would be to see if there was a way to at least identify which device might be the problem on. Peter I identify as half man half biscuit - crumbs! Log in to reply |
| Virus scanners for connected devices 27/04/2023 at 20:19 #151553 | |
pedroathome
915 posts |
Hi Peter Was this a phone call? If so, you've been told by someone claiming to be Virgin Media (Is this your provider?), who I'd strongly suspect is a scammer located in another continent. Were they trying to get remote access into your computer or to get you to "purchase" some kind of protection from them? In the past, I've had calls claiming to be from multiple internet providers - None of which I was ever with, and some that have claimed to be from "my internet provider" but unable to tell me who that is. James Last edited: 27/04/2023 at 20:20 by pedroathome Reason: None given Log in to reply |
| Virus scanners for connected devices 27/04/2023 at 20:31 #151554 | |
i26
308 posts |
Main question is how would Virgin Media know this? They don't have access to your devices so how would they know Malware is installed on one of them? Sounds very fishy if you ask me.
Log in to reply The following user said thank you: andyb0607 |
| Virus scanners for connected devices 27/04/2023 at 20:57 #151555 | |
|
Peter Bennet
5402 posts |
pedroathome in post 151553 said:Hi PeterThey emailed me and wrote a letter which arrived today. It's also discussed on their Forum where I've asked the same question but no answers so far. https://community.virginmedia.com/t5/Security-matters/Device-may-be-infected-with-malware/m-p/5289046#M51058 I've also had my email blocked a couple of times and had to get it "released" by VM. The email blocking being ascribed to problems detected on my IP address and a "web bot" I think it was, interestingly that issue occurred soon after my IP address was changed after they changed the hub a few weeks ago. The letter says "We work with a number of not-for-profit organisations that gather information about internet connections that appear to be at risk of things like malware infections" It is all a bit vague and non-specific nor clear who it is that's doing this reporting. Peter I identify as half man half biscuit - crumbs! Last edited: 27/04/2023 at 20:57 by Peter Bennet Reason: None given Log in to reply |
| Virus scanners for connected devices 27/04/2023 at 21:31 #151557 | |
GeoffM
6376 posts |
Some theories: - Virgin (or its third parties) monitor attempts to connect to known bad URLs, so it saw a connection attempt from the IP address associated with Peter to that bad address and prompted the letter - It only happened after Peter's IP address changed, so perhaps the previous user of that IP address is actually the "victim" (the one with the malware) - The malware in question was [also] sending spam, hence the email problems All theoretically possible but guesses as to whether this is the case here. SimSig Boss Log in to reply |
| Virus scanners for connected devices 27/04/2023 at 22:37 #151559 | |
|
Peter Bennet
5402 posts |
I did put that point to VM but they did not bite. The thing that I'm trying to establish is whether I can scan my connected devices that are not PCs in some way. I presume it's possible for these devices to become infected somehow. Peter I identify as half man half biscuit - crumbs! Log in to reply |
| Virus scanners for connected devices 27/04/2023 at 23:30 #151560 | |
MrSuttonmann
265 posts |
Peter Bennet in post 151559 said:I did put that point to VM but they did not bite.Embedded systems such as cars, TVs, set top boxes etc (things which have firmware as opposed to an operating system) would be very difficult, time consuming and expensive to write viruses for, if it’s possible at all. I largely wouldn’t worry about things like that. The main vector for computer infections is PC, usually Windows. I would possibly take what Virgin are saying with a pinch of salt, but perform regular virus scans on all of your computers, laptops etc. (Formerly known as manadude2) Log in to reply |
| Virus scanners for connected devices 28/04/2023 at 09:27 #151562 | |
Jan
906 posts |
MrSuttonmann in post 151560 said:Embedded systems such as cars, TVs, set top boxes etc (things which have firmware as opposed to an operating system) would be very difficult, time consuming and expensive to write viruses for, if it’s possible at all. Samsung's smart TVs are using a Linux-based OS these days (Tizen), while other smart TVs are running a full Android system (which, again, is Linux-based under the hood). Internet router viruses definitively have been a thing, too. Unsecured IP cameras are likely another popular target… Two million people attempt to use Birmingham's magnificent rail network every year, with just over a million of them managing to get further than Smethwick. Log in to reply |
| Virus scanners for connected devices 28/04/2023 at 09:48 #151563 | |
|
Sacro
1171 posts |
The only real way I can think of is by monitoring outbound traffic. I have a PiHole server https://pi-hole.net/ running that I route various devices past, but that can only tell me a limited amount of where things are going. I've seen routers that show traffic by source/destination IP, but that might not be something a residential Virgin Media router offers, even if internally it keeps track of it for sending/receiving data. The other question would be, even if you *did* find a compromised device, would there be a firmware update to correct it, and if that firmware update is already available, why not just apply it anyway. Log in to reply |
| Virus scanners for connected devices 28/04/2023 at 10:53 #151564 | |
|
bill_gensheet
1413 posts |
As said much depends on the capabilities of your router. However it may be able to list the MAC addresses of all connected devices it has given an IP address to. Are there any 'strangers' on the list ? Thinking of a neighbouring house streaming dodgy TV streams on a Kodi box for example. Can you prevent some of the 'internal' devices from connecting outwards if you do not need that functionality out of the house ? Log in to reply |
| Virus scanners for connected devices 28/04/2023 at 17:25 #151576 | |
|
Peter Bennet
5402 posts |
Thanks, I'll look into these suggestions. Peter I identify as half man half biscuit - crumbs! Log in to reply |
| Virus scanners for connected devices 29/04/2023 at 17:49 #151604 | |
Red For Danger
172 posts |
Have you tried running a scan with an alternative anti-virus.....? I personally use Malware Bytes which is pretty good at tracking any malware issues - You can also get a free Premium subscription for up to 10 devices if you bank with Nat-West (available via the Nat West website). Alternatively, the built in Windows defender is also very good nowadays and has lost it's previously poor reputation. You may have to temporarily disable Norton before running another anti-virus however as they may see each other as a threat. In the meantime, I would also be a bit suspicious about Virgin Media - I think they may be trying to scare you into buying their anti-virus service...... Log in to reply |