Hi polonus,
Much appreciation for your help.
I changed the password of my router and WIFI. When reconnecting to my WIFI, a Avast pop up window appears with “connection to new network” where my WIFI name had a strange EXT2 and then a EXT3 on a 2nd reconnection. On a 3rd reconnection, Avast doesn’t give me those fake connection names anymore but instead my regular WIFI name without the EXT2 or EXT3. Can I trust this connection is truly mine and the ARP Spoofer is out?
I disconnected a device with the “XX.XX.27” in my router which left my WIFI Extender not working. So I enabled it again and my Wifi Extender works again. Therefore, I assume that IP number is my WIFI range extender. When I check XArp, the “XX.XX.27” and the other numbers have a green checkmark on them. If I reconnect, the results sometimes are the same, but other times are different with the same numbers with a red X. Xarp sometimes give my router ip and my laptop ip a red X. Sometimes a green checkmark. Oddly, the only consistent green checkmark is the “XX.XX.27”.
XArp pop up windows says “Corrupt Filter: ethernet sender mac does not match arp sender mac” and another that says “MacFilter: incoming packet but sender mac set to our own mac address”. Not sure what these two descriptions mean.
I scanned using ESET Online Scanner and Rkill and no detections pop up. Using the Microsoft Safety Scanner still shows 8 virus detections but once the scan finishes, it says no infections.
I did a network reset again. Using the CopyReplit on CMD doesn’t work. But the arp -d * does work but after a restart the entries persist. I don’t know how to remove suspicious static ARP entries.
I am confused if the ARP Spoofer is still on my PC or not. Changing the password on my WIFI has changed my “XX.XX.27” from being a consistent red X to a consistent green checkmark. I don’t know why Microsoft Safety Scanner keeps on detecting viruses but after the scan, it says no detection.