FRIHOST FORUMS SEARCH FAQ TOS BLOGS COMPETITIONS
You are invited to Log in or Register a free Frihost Account!


ARP Virus





biolu
Hi everyone,

My company network is infected by an ARP Virus, and it is a real pain in the ass, it blocks most of the internet connection.
Do you guys have any recommandation for removing the virus and how to prevent these kind of virus later? We already have an antivirus installed (360) but looks like it doesn't work properly.

Thank you!
Marcuzzo
I have heard of a virus that actually poisons the ARP cache of a client, most of the times used for man-in-the-middle attacks.
see http://en.wikipedia.org/wiki/ARP_spoofing

removal:
most viruses are removed in somewhat the same way,
    boot in safe mode
    find the start up reference and remove it ( registry, start up folder, policy, whatever)
    Delete the executable files
    Update antivirus
    Scan entire system


in this case I would also clear out the ARP tables
Code:
netsh interface ip delete arpcache

also before clearing it, run the following command,
Code:
arp -a >> C:\arpTable.txt

this may give you a little more information on the IP Addresses that are stored in the cache.

Preventing:
1. update your antivirus regularly
2. don't give your users admin rights as they are likely the ones that have introduced the virus to your network.
3. use a firewall
deanhills
Awesome post Marcuzzo in simple language that every one can understand. Wish it could be stickied. Cool
biolu
Thanks I will try this right now!
jdelfire
It will be pretty helpful as well if you can put your Hijacklog in here

Also might as well try MBAM it is pretty light and catches most of the bad guys(not all)...

You may not get it fixed by using one antivirus alone it may require manual removal.
biolu
Thanks. That's really shitty as it infected the whole network of my office. Guess not all firewall are very effective Sad
Related topics
Anti Virus
Virus says - Pay me or else ....
Taiwan- China or U.S.
can a virus cause unrecoverable damage to HD?
Michael Jackson 'Suicide' virus spreads
What to do when you get a virus
HOW TO ENSURE THAT VIRUS DOES NOT SPREAD THRU YOUR ADDRESSBk
Stupid MSN virus
Windows Vista Virus!!
Computer Virus Types
Is Windows a virus?
porn virus
[Official] Security: Anti-Spyware/Virus, & Firewall
Linux office network
Reply to topic    Frihost Forum Index -> Computers -> Computer Problems and Support

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2011 Frihost, forums powered by phpBB.