Device "Remote NDIS based internet Sharing Device" was added

Hello,
I got a plenty alerts yesterday from Glasswire software and they look like this :
-Device list changed
Device “Remote NDIS based internet Sharing Device” was added.

Device list changed
Device “Remote NDIS based internet Sharing Device” was removed.

I got these couple alerts about 10 times in a row within 5 hours and this is the first time i get this type of alerts.
Should i be worry about something ?! Like being hacked or having a malware ?
Thank you :slight_smile:

NDIS (Network Driver Interface Specification) is a driver type for Windows. As its name suggests it is related to network adapters.

There is nothing to be concerned about as these alerts are not normally malware or hacking. @Ken_GlassWire can confirm this for you when he’s back online.

If you’re want to know more about NDIS then read on.

As the names suggests, these drivers are intermediate drivers that fit between the network adapter driver and the network driver. The Microsoft article NDIS driver types has diagrams that show how they fit with other driver types.

I said it is a driver type for simplicity. Technically, NDIS is actually the API (Application Programming Interface) used to standardise the interface between the low-level hardware drivers and the higher-level drivers for your network.

1 Like