Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: ARP cache poisoning attack

16 May 2012   #1

Windows 7 Ultimate x32
ARP cache poisoning attack

Hi All

ESET Nod32 is picking up an ARP cache poisoning attack as well as a Port scanning attack(daily) from one of the other Windows PC's on my home LAN. The other PC, like mine is a Windows 7 PC, both Home Premium.

Is that possibly malware or a virus on the other PC that is doing this? Does this affect my internet speeds, cause I've been really getting slow internet speeds since these message started appearing first.

Any suggestion on how I should handle this?


My System SpecsSystem Spec
16 May 2012   #2

W7 Pro SP1 64bit

Quote   Quote: Originally Posted by DextrousDave View Post
Hi All
Any suggestion on how I should handle this?

You could stick to one thread ;-)

Try running ESET's online scanner on the other computer.

Edit: Below is what you might see the first time you use that online scanner on IE8 or IE9. Subsequent scans are quicker. If desired, the online scanning tool can be uninstalled via the web interface after the scan completes or via the normal OS interface for uninstalling apps.

ESET's online scanner seems to get along with most other anti-virus tools.

(You may need to view in the full screen mode and at 480p)

My System SpecsSystem Spec
16 May 2012   #3
Microsoft MVP

Windows 7 Ultimate 32bit SP1

You might want to try ARPCache Viewer (freeware)

Registry information for Add/Remove (Programs and Features)
Freeware - ARPCache Viewer
ARPCache is a secret, undocumented section of the registry used to store
information for Add/Remove Program items in the latest versions of Windows.
If you open Add/Remove Programs in the newer versions of Windows, you will
notice that certain information has been added, such as, size, frequency of
use, and last used on. This data is kept in binary files in the ARPCache of
the registry, which means that even if you know where it is in the registry,
you probably will not be able to read it. ARPCache Viewer deciphers the
binary files and shows you what is in each entry
My System SpecsSystem Spec

17 May 2012   #4

Windows 7 Ultimate x32

Thank you for the answers. Appreciated.
@Jacee. Why would the other computer poison my ARP cache and what implications does it hold should the poisoning attack be successful?
My System SpecsSystem Spec
17 May 2012   #5

W7 Pro SP1 64bit

Not to answer for Jacee, but here is more than you ever wanted to know about ARP cache poisoning.

Did the other computer get scanned by ESET?
My System SpecsSystem Spec

 ARP cache poisoning attack

Thread Tools

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:59 AM.
Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33