Comments for Web Trac http://www.web-trac.com Computer, Internet, Web, Mobile ... Sun, 07 Sep 2008 17:52:26 +0000 http://wordpress.org/?v=2.5.1 Comment on Update: Removing JS/Downloader.Agent virus by Dhiru http://www.web-trac.com/update-removing-jsdownloaderagent-virus-02-02/#comment-64 Dhiru Wed, 06 Aug 2008 02:11:04 +0000 http://www.web-trac.com/index.php/update-removing-jsdownloaderagent-virus-02-02/#comment-64 Well, i had the same problem with my Network, but luckily my ISP provides a good antivirus as a compulsion. I had 3 infected PC's in my Network. Whenever these PC's were ON, i used to have this problem. My Solution that worked for me: 1. Whenever you get this problem, Ping to your Gateway and check Latency 2. Scan for all the PC's in the network using some third party software to determine their MAC address. Once done, note down the infected IP's MAC Address and also note down the MAC Address of your . 2. Change your IP address 3. Disable your LAN Adapter 4. Reenable your LAN Adapter 5. In the Command Prompt, type "arp -s EX: ARP -S 10.21.207.1 00-11-11-b9-57-66 6.Similarly use "ARP -S 7. Once done, type "ARP -A" to see the changes. 8. Change back your IP address and look for the Gateway Ping Latency. You can observer Relatively lower latency because all your data packets are directly reaching the Gateway instead of the Infected Computer. 9. In this way, i do it everytime i start my PC. I know the list of Infected PC's so i just assign a Static ARP Entry so that they can spoof my ARP. Hope this Helps! Well, i had the same problem with my Network, but luckily my ISP provides a good antivirus as a compulsion. I had 3 infected PC’s in my Network. Whenever these PC’s were ON, i used to have this problem.

My Solution that worked for me:
1. Whenever you get this problem, Ping to your Gateway and check Latency
2. Scan for all the PC’s in the network using some third party software to determine their MAC address. Once done, note down the infected IP’s MAC Address and also note down the MAC Address of your .
2. Change your IP address
3. Disable your LAN Adapter
4. Reenable your LAN Adapter
5. In the Command Prompt, type “arp -s
EX: ARP -S 10.21.207.1 00-11-11-b9-57-66
6.Similarly use “ARP -S
7. Once done, type “ARP -A” to see the changes.
8. Change back your IP address and look for the Gateway Ping Latency. You can observer Relatively lower latency because all your data packets are directly reaching the Gateway instead of the Infected Computer.
9. In this way, i do it everytime i start my PC. I know the list of Infected PC’s so i just assign a Static ARP Entry so that they can spoof my ARP.

Hope this Helps!

]]> Comment on hk.www404.cn:53/ads.js by islam http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-62 islam Fri, 04 Jul 2008 05:22:10 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-62 virus changed its code to http:// mx.content-type.cn: 443 / f / index.htm DONT OPEN IT be aware from this trojan virus changed its code to http:// mx.content-type.cn: 443 / f / index.htm

DONT OPEN IT
be aware from this trojan

]]> Comment on hk.www404.cn:53/ads.js by Dhiru http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-61 Dhiru Tue, 01 Jul 2008 07:57:22 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-61 Same thing what hamid told... There will be a computer connected to your LAN with a different IP but it will have the same MAC Address of that of your Gateway. You must talk to your ISP and deal with the PC that is infected. All the Network Traffic Passes through the infected computer and hence the JS Virus is infected in the browser page that is requested! Same thing what hamid told…

There will be a computer connected to your LAN with a different IP but it will have the same MAC Address of that of your Gateway. You must talk to your ISP and deal with the PC that is infected. All the Network Traffic Passes through the infected computer and hence the JS Virus is infected in the browser page that is requested!

]]> Comment on Answers to win 26″ LCD TV by Rose http://www.web-trac.com/answers-to-win-26-lcd-tv-19-11/#comment-58 Rose Tue, 24 Jun 2008 11:03:16 +0000 http://web-trac.com/index.php/answers-to-win-26-lcd-tv-19-11/#comment-58 Thank you for posting, but it's seem too late for me as I just found your post here. :-) Thank you for posting, but it’s seem too late for me as I just found your post here. :-)

]]> Comment on hk.www404.cn:53/ads.js by Fachia http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-55 Fachia Mon, 16 Jun 2008 17:15:45 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-55 @ hamid reza, please tell me clearly how to identify if a computer in a network is infected by this virus. Tell me how to use ARPprotect mentioned above @ hamid reza, please tell me clearly how to identify if a computer in a network is infected by this virus. Tell me how to use ARPprotect mentioned above

]]> Comment on hk.www404.cn:53/ads.js by how can kill this virus http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-52 how can kill this virus Sun, 15 Jun 2008 00:36:46 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-52 how i can kill or stop this virus how i can kill or stop this virus

]]> Comment on hk.www404.cn:53/ads.js by hamid reza http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-51 hamid reza Sat, 14 Jun 2008 04:36:30 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-51 Salam This virus is in LAN no in ISP. This virus use ARP Spoofing Tec for redirect LAN Treffic from this path LAN > LAN Gateway > Internet to LAN > Infected PC > LAN Gateway > Internet. For virus identification you should use "arp -a" command in cmd. If there is(or are) MAC address same with "gateway MAC address" this computer(s)infected with this virus. Salam
This virus is in LAN no in ISP. This virus use ARP Spoofing Tec for redirect LAN Treffic from this path LAN > LAN Gateway > Internet to LAN > Infected PC > LAN Gateway > Internet.
For virus identification you should use “arp -a” command in cmd.
If there is(or are) MAC address same with “gateway MAC address” this computer(s)infected with this virus.

]]> Comment on hk.www404.cn:53/ads.js by panchitoman http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-50 panchitoman Sat, 07 Jun 2008 23:58:52 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-50 well.. now my pc is clean.. and I didn't have to change my ISP well.. now my pc is clean.. and I didn’t have to change my ISP

]]> Comment on hk.www404.cn:53/ads.js by Vinu http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-49 Vinu Fri, 06 Jun 2008 23:09:52 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-49 I Found my system/network to be infected with this Trojan ... Then i thought if this spreads via ARP then clearing your arp cache and protecting your would be a good option and it works for me and btw I use Comodo FW Pro 3 I Found my system/network to be infected with this Trojan … Then i thought if this spreads via ARP then clearing your arp cache and protecting your would be a good option and it works for me

and btw I use Comodo FW Pro 3

]]> Comment on hk.www404.cn:53/ads.js by panchitoman http://www.web-trac.com/hkwww404cn53adsjs-10-05/#comment-46 panchitoman Sun, 01 Jun 2008 00:47:32 +0000 http://www.web-trac.com/index.php/hkwww404cn53adsjs-10-05/#comment-46 well...I used a program "ARProtect" , this program help you to detect which PCs in your red is infected really, so I found that my computer did not have the virus if not that another PC in my network was infected and it have the real virus (this PC infects to all PCs in my network) ....so the only thing to do is disconnect the real infected computer from the network ....so if you want to know which computer is infecting your Internet..download the program "ARProtec"..in the coming days I will tell you that happened... well…I used a program “ARProtect” , this program help you to detect which PCs in your red is infected really, so I found that my computer did not have the virus if not that another PC in my network was infected and it have the real virus (this PC infects to all PCs in my network) ….so the only thing to do is disconnect the real infected computer from the network ….so if you want to know which computer is infecting your Internet..download the program “ARProtec”..in the coming days I will tell you that happened…

]]>