Detected DNS cache poisoning attack.

Jacee said:

Flush the DNS cache and restore MS's Hosts file ...
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop. Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself.

Now run a full scan with Eset and let me know if it still detects a DNS cache poisoning.

One small item to be aware of:
If you follow Jacee's advice above, & run that batch file, be advised that if you're using a static IP, you will be left unable to connect to any sites--until you go back into the settings for your network adaptor & re-enter your chosen static settings.
Just sayin....

Hello all,

I know this is thread was up quite awhile already, but I'm having the same problem at the moment.


I tried running the .bat file Jacee mentioned, I am still getting the DNS attack message

I ran Malwarebytes full scan for problems, nothing.

I even tried asking the ESET technical support (useless btw), they gave me instructions to HIDE the message instead of trying to help me ELIMINATE the problem.

I've also tried the DNS Flush (one of the solution i found on ESET's website)

Can anyone here help me out?? Much appreciated :)

Jacee said:

Flush the DNS cache and restore MS's Hosts file ...
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop. Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself.

Now run a full scan with Eset and let me know if it still detects a DNS cache poisoning.

Yikes! Ran this and several of my programs seem to have disappeared!!!! Am trying a system restore, but am NOT a happy camper right now

As typical in forums there is often a mix of good and bad information. May I suggest the following URL as a first step in solving this issue:

< DNS Cache Poisoning Attack - ESET Knowledgebase >

Is is not a good idea to run a second antivirus/antispyware program on a system with an already installed security program. They will conflict. For example, just look at at a previous posting on this forum. MalwareBytes was installed and ended up detecting, quarantining and deleting an essential component (EKRN.exe) of the ESET program. That did not solve the problem but created one!

Thread Carefully,

Northernwolf