What is BRCM-LVG under shared? Is my computer being hacked?

Recently, a PC device called brcm-lvg has been showing up on my network in the finder sidebar under sharing.


It started showing up around the time that I upgraded to Yosemite, V 10.10.4. This could just be coincidence.


I have no idea what this device is and a Google search returns unhelpful results. After upgrading to Yosemite, I noticed my Firewall had been turn off. When it's turned off, it says I'm connected to the "brcm-lvg" device as a guess. This device contains one empty folder called "Shared." How could I possibly be connected to this device if I never connected myself to it?


When I turn the firewall on, the mysterious device says the Connection Failed. However, I can't remove the device from the sidebar at all. Even when I press the eject button, it stays there.


What is this "brcm-lvg" device? Is my computer being hacked?


Thank you for your help

MacBook Pro (Retina, 15-inch, Late 2013), OS X Yosemite (10.10.4), null

Posted on Aug 19, 2015 11:08 AM

Reply
Question marked as Top-ranking reply

Posted on Apr 4, 2016 8:49 PM

This shared BRCM-LVG showed up on my Mac when we got a new ISP "Time Warner Cable" and they installed a Tricolor TC8715D router/modem. It concerned me so thought I would try a quick Google search and found this forum. Not being one of these "everyone's out to get me" conspiracy nuts I thought I would do some research so here's what I've found. zhen424 seems to be right on the money. I went through the setting and found my DLNA and Digital Media Server and USB Settings were all on by default. Turned them all off. Reset router. A quick IP scan later and the mysterious BRCM-LVG device is gone.

Here's how I understand this works. If you wish to... you could connect a Hard Drive via USB to your shiny new router and use it as a Network Attached Storage (NAS) device. But, in order to access this, now wirelessly connected, mass storage device there needs to be a intermediary device that handles the connection, searches said HD for files and transfers to PC, takes incoming files from PC and writes them to the HHD, etc. Built into the TC8715D there exists such a device and it's main chipset is made by Broadcom which explain the name. Now... if you're still worried about it, just turn off the features i mentioned above, reset the router and eject the BRCM-LVG device from your Macs. Enjoy!

46 replies

Mar 8, 2016 10:26 AM in response to diana from new york

I don't know if this helps, I do not use either they modems described or the services. However, I just installed Skype, which is somehow also using Microsoft systems, to run the software. This is almost immediately, when this showed up on my Mac for the first time. I wonder if this is something done during the installation of Skype? Perhaps there is a connection?

Dec 1, 2015 2:15 PM in response to cbg2115

brcm-lvg is a NAS device part of TC8715D modem. It has its own IP address. This is a nice little modem feature that allows to store shared files in your local network. You can attach a USB dongle to the modem and enable USB in TC8715D configuration page. I only see brcm-lvg when I attach USB and enable USB device. It is possible you may see brcm-lvg even without external storage attached but it is fine.

Jan 9, 2017 12:24 PM in response to cbg2115

Hey all,

I just had the same thing happen after receiveing a new Technicolor router from TWC this am. Here is a link to the manual for that particular device that explains that the "brcm-lvg" is simply a media sharing platform from the USB ports on the back of your router. Hope this helps.

https://www.manualslib.com/manual/933809/Technicolor-Tc8717c.html?term=brcm-lvg& page=50#manual

Apr 29, 2017 6:29 AM in response to cbg2115

Yeah weird that so many people have encountered this. I just wanted to add my two cents. I had the exact same problem with an Aaris router, 3 Ubee and a technicolor but I typically only see the attached PC immediately after wiping and reinstalling my operating system. I'm not sure how that's related other than the firewall is off by default (a real genius must have thought of that one). My router are all cable telephony ones that do internet and a landline in one device.


I'd also like to add that the "master password" for the Aaris modem is widely available for a number of modems including the one time Warner provided me for a number of years the TG1672. There's a whole separate advanced section meant for TW installers/techs and the password to access it is T!M3W4RN3RC4B13 something like that so that the tech doesn't have to think too hard and can easily remember the password. An installer told me that's how all of the TW arris routers work and thats why they like them. Anyway apparently its a 5 second brute force password hack and they can do whatever they want on your computer. TW and AppleCare both had no idea what any of that meant or pretended not to.


I think its somehow related to a whole bunch of "unknown" extensions in /Library/Extensions and kext with "????" architecture when running kextstat -a -s command. Linc Davis said some of these extensions is /Library/Extensions are a "corruption" very clearly when someone asked about them but they're installed on my recovery partition which I'm assuming is the EFI too?

Aug 12, 2017 11:57 AM in response to cbg2115

I absolutely have the answer for you.


As others have suggested, this definitely is a feature of your Time Warner Cable modem.


The reasons why I am 99.9% certain, is that (A) the MAC address for my "Brcm Lvg" is identical for the first eight characters (the first four two-character pairs) as my TWC router; and (B) both my TWC router and my "Brcm Lvg" indicate that they are made by the same company (Technicolor CH USA Inc).


Accordingly, and as there are no other unknown devices on my network that could be the "Brcm Lvg", it absolutely is some sort of feature of the TWC router.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

What is BRCM-LVG under shared? Is my computer being hacked?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.