Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: ARP cache poisoning attack

16 May 2012   #1
DextrousDave

Windows 7 Ultimate x32
 
 
ARP cache poisoning attack

Hi All

ESET Nod32 is picking up an ARP cache poisoning attack as well as a Port scanning attack(daily) from one of the other Windows PC's on my home LAN. The other PC, like mine is a Windows 7 PC, both Home Premium.

Is that possibly malware or a virus on the other PC that is doing this? Does this affect my internet speeds, cause I've been really getting slow internet speeds since these message started appearing first.

Any suggestion on how I should handle this?

Thanks


My System SpecsSystem Spec
.
16 May 2012   #2
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by DextrousDave View Post
Hi All
~~~
Any suggestion on how I should handle this?

Thanks
You could stick to one thread ;-)

Try running ESET's online scanner on the other computer.

Edit: Below is what you might see the first time you use that online scanner on IE8 or IE9. Subsequent scans are quicker. If desired, the online scanning tool can be uninstalled via the web interface after the scan completes or via the normal OS interface for uninstalling apps.

ESET's online scanner seems to get along with most other anti-virus tools.

(You may need to view in the full screen mode and at 480p)


My System SpecsSystem Spec
16 May 2012   #3
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

You might want to try ARPCache Viewer (freeware)

Registry information for Add/Remove (Programs and Features)
Freeware - ARPCache Viewer
ARPCache is a secret, undocumented section of the registry used to store
information for Add/Remove Program items in the latest versions of Windows.
If you open Add/Remove Programs in the newer versions of Windows, you will
notice that certain information has been added, such as, size, frequency of
use, and last used on. This data is kept in binary files in the ARPCache of
the registry, which means that even if you know where it is in the registry,
you probably will not be able to read it. ARPCache Viewer deciphers the
binary files and shows you what is in each entry
My System SpecsSystem Spec
.

17 May 2012   #4
DextrousDave

Windows 7 Ultimate x32
 
 

Thank you for the answers. Appreciated.
@Jacee. Why would the other computer poison my ARP cache and what implications does it hold should the poisoning attack be successful?
My System SpecsSystem Spec
17 May 2012   #5
UsernameIssues

W7 Pro SP1 64bit
 
 

Not to answer for Jacee, but here is more than you ever wanted to know about ARP cache poisoning.

Did the other computer get scanned by ESET?
My System SpecsSystem Spec
Reply

 ARP cache poisoning attack




Thread Tools




Similar help and support threads
Thread Forum
dns poisoning?
I've two pc's on the network; 1 is windows7, the other XP. The network aslo has a couple of wifi clients (phones and laptops) Anyways; I've had it a couple times now, where the home page (google.ca) loads to an adobe update page that insists on having me download an exe for update. This page url...
Network & Sharing
DNS cache poisoning attack shutting down my internet and keep on comin
Hi, It has been a long time since this errors started,It is disappearing when I flushing my DNS, but it always comes back and annoys.. I have Eset SmartSecurity 5 and when this attack comes I get a meesage like this: " Detected DNS cache poisoning attack IP:..... " When this is happening I...
System Security
DDoS Attack, Changed IPs Still Under Attack
I'm being DDoS attacked. My ping was been spiking from 50 to 250+. I've tried changing my IP multiple times and I still was attacked (Note: I own 3 computers and 1 tablet). I've tried disabling startup processes, av scans, and basic rootkit scans and found nothing. However, after I uninstalled...
System Security
Detected DNS cache poisoning attack.
My Eset Smart Security 5 alert me with this message. Detected DNS cache poisoning attack Remote IP address: xxx.xxx.xx.xxx <---<Numbers here. What exactly is this for?
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:27.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App