Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Detected DNS cache poisoning attack.

24 Feb 2012   #11
riprap1951

Windows 7 Home Premium
 
 
One small note

Quote   Quote: Originally Posted by Jacee View Post
Flush the DNS cache and restore MS's Hosts file ...
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0


Save as flush.bat to your desktop. Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself.

Now run a full scan with Eset and let me know if it still detects a DNS cache poisoning.
One small item to be aware of:
If you follow Jacee's advice above, & run that batch file, be advised that if you're using a static IP, you will be left unable to connect to any sites--until you go back into the settings for your network adaptor & re-enter your chosen static settings.
Just sayin....


My System SpecsSystem Spec
.
25 Feb 2012   #12
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

@ weensyweb ... you're running an outdated version of Malwarebytes. The latest version is 1.60.1
My System SpecsSystem Spec
20 May 2012   #13
bin101

Windows 7 Professional x64
 
 

Hello all,

I know this is thread was up quite awhile already, but I'm having the same problem at the moment.


I tried running the .bat file Jacee mentioned, I am still getting the DNS attack message

I ran Malwarebytes full scan for problems, nothing.

I even tried asking the ESET technical support (useless btw), they gave me instructions to HIDE the message instead of trying to help me ELIMINATE the problem.

I've also tried the DNS Flush (one of the solution i found on ESET's website)

Can anyone here help me out?? Much appreciated
My System SpecsSystem Spec
.

10 Oct 2012   #14
Meleo

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by Jacee View Post
Flush the DNS cache and restore MS's Hosts file ...
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0


Save as flush.bat to your desktop. Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself.

Now run a full scan with Eset and let me know if it still detects a DNS cache poisoning.
Yikes! Ran this and several of my programs seem to have disappeared!!!! Am trying a system restore, but am NOT a happy camper right now
My System SpecsSystem Spec
25 Nov 2012   #15
Northernwolf

xp
 
 
ESET Reporting DNS cache poising attack

As typical in forums there is often a mix of good and bad information. May I suggest the following URL as a first step in solving this issue:

< DNS Cache Poisoning Attack - ESET Knowledgebase >

Is is not a good idea to run a second antivirus/antispyware program on a system with an already installed security program. They will conflict. For example, just look at at a previous posting on this forum. MalwareBytes was installed and ended up detecting, quarantining and deleting an essential component (EKRN.exe) of the ESET program. That did not solve the problem but created one!

Thread Carefully,

Northernwolf
My System SpecsSystem Spec
Reply

 Detected DNS cache poisoning attack.




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
dns poisoning?
I've two pc's on the network; 1 is windows7, the other XP. The network aslo has a couple of wifi clients (phones and laptops) Anyways; I've had it a couple times now, where the home page (google.ca) loads to an adobe update page that insists on having me download an exe for update. This page url...
Network & Sharing
DNS cache poisoning attack shutting down my internet and keep on comin
Hi, It has been a long time since this errors started,It is disappearing when I flushing my DNS, but it always comes back and annoys.. I have Eset SmartSecurity 5 and when this attack comes I get a meesage like this: " Detected DNS cache poisoning attack IP:..... " When this is happening I...
System Security
ARP cache poisoning attack
Hi All ESET Nod32 is picking up an ARP cache poisoning attack as well as a Port scanning attack(daily) from one of the other Windows PC's on my home LAN. The other PC, like mine is a Windows 7 PC, both Home Premium. Is that possibly malware or a virus on the other PC that is doing this? Does...
System Security
Port Scanning attack detected on ESET
Hi All. My colleague and I each have a windows 7 machine on a LAN. Now I have ESET NOD32 installed and it frequently shows me that his PC's internal IP address is scanning my ports - "Detected Port scanning attack from 192.168.0.8". Now I checked the log files in ESET and it says everytime that...
System Security
Detected port scanning attack?
Im using eset smart security 5 and im getting this message "Detected port scanning attack" Is this a serious threats or false alarm? If it is a serious threat how to neutralize it? Regards
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:59.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App