W32.Arpiframe virus - Microsoft Windows

my Internet explorer getting 20 bs on top left corner. It is a virus called W32.Arpiframe. i deleted that on my computer, but after I connect to our network it will get infect again. is anyone had that issue before and how to delete it from network?

Thanks

Nov 7 '07 #1

Subscribe Post Reply

2541

flumesoft

Hello Cyberlei,

I have looked into your problem and found a little bit of information. Firstly you might need to switch over to firefox as it is much better. I never really thought it was until i switched. Alright now to get rid of it.

I found this on another site

1. Temporarily Disable System Restore (Windows XP).
2. Update the virus definitions.
3. Reboot computer in SafeMode

4. Run a full system scan and clean/delete all infected files.

5. In order to make sure that threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.

Try deleting again and if the problem still occurs please contact us.

Hope we could help
Flumesoft.com

Nov 8 '07 #2

epots9

1,351

Expert 1GB

changed thread title to something better.

Nov 8 '07 #3

StefanPienaar

Hi

We've recently started having the same problem on our production server. Whenever someone would access any website/webpage from the server, the returned html would have a string of B's injected right before the <html> tag.

I've googled and it seems to be this W32.Arpiframe virus which is causing it. Can anyone tell me how I can remove it without Norton? We've tried installing a new version of norton but as expected norton is up to its usual tricks and refuses to install because we had a really, really old version on there a few months ago. Guess its conflicting or something.

The weird thing is that this comes and goes, it will return those damn B's a whole day long and the next its gone only to return again the day after.

Thanks in advance
Stefan Pienaar

Nov 12 '07 #4

KirkLashbrook

We had this last week.

You need to find which machine on the network is infected and intercepting the HTTP packets.

It's typically NOT the machine displaying the 20 B's in the browser.

If it's a small network with a single segment, start unplugging one machine at a time until you can identify the source.

If it's a large network, you'll need a sniffer to determine which machine is doing the ARP Spoofing.

Once we figured out what was going on with the ARP spoofing, it took our network guy about 5 minutes with the sniffer to track down two PCs that were infected.

Nov 12 '07 #5

cyberlei

The virus has been removed from our network. I just did like KirkLashbrook said use ethereal to sniffer your network on a switch or Hub which is connect the ISP, see which computer sending a huge packets out then disconnect from your network and remove the virus.

Nov 13 '07 #6

StefanPienaar

Thanks for the replies. It's a huge network with multiple computers in various offices on two different floors of the building.

I have installed a packet sniffer but it seems that the webpages are working fine today (no B's) so I guess which ever computer is causing it is still offline.

Thanks for the help

Stefan

Nov 13 '07 #7

Similar topics

File Upload / Virus Risk

by: Andrew Robinson | last post by:

I am working on an application and the customer would like the ability for users to attach / upload a Word document. This document will be stored on the web server directly into SQL and later be...

ASP.NET

Virus scannnig document before saving to database

by: sameer | last post by:

Hi all, ..net framwork 1.1 sql server 2000 I have a vb.net winforms application using webservices\ remoting to upload documents\ images to the webserver and i am gong to store them in the sql...

.NET Framework

virus scan documents before saving to database

by: sameer | last post by:

Hi all, ..net framwork 1.1 sql server 2000 I have a vb.net winforms application using webservices\ remoting to upload documents\ images to the webserver and i am gong to store them in the sql...

ASP.NET

virus attack please help

by: crossroadsk | last post by:

i'm using windows xp a strange virus is residing in my system ... whenever i come across a scrollbar in any window i open .. the virus comes into action ... it takes control of that scroll... ...

Microsoft Windows

questions about computer virus

by: SRSRAJA | last post by:

respected sir; i have a doubt about computer viruses,that is; for eg consider: my system has a lot of viruses. the doubt is ,if i insert a disk or a pen drive which has full of details, that...

Microsoft Windows

Are these files virus? Can I delete them?

by: =?Utf-8?B?QWxleA==?= | last post by:

Ther are tons of files in the WINDOWS foler of my Winsow XP. They all look similar. For Example: KB308304 KB009800 KB476855 .... or something like: Q123344 Q574485 Q955848

.NET Framework

How,,,virus Free Ear Files?

by: intruderX | last post by:

One person asked me whether I can guaranty that the web solution that I provide for him, is free of virus attacks.I was willing to use JSF,EJB3 and Hibernates, but I don't have any idea of keeping...

Java

How does an antivirus use virus signature to detect a virus?

by: amitkashyap01 | last post by:

Hi Plz tell me how an antivirus uses virus signature to detect a virus? Till now , I only came to know that there is some Pattern matching algorithm to detect a virus.. But i want to know that...

Desktop Software

How to turn on java script in a villaon keypad mobile phone

by: Charles Arthur | last post by:

How do i turn on java script on a villaon, callus and itel keypad mobile phone

Java

Merging data from multiple Excel files

by: ryjfgjl | last post by:

In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...

Data Management

Is that possible of reading the .csv file in column wise and the column have different lengths ?

by: Sonnysonu | last post by:

This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...

C / C++

How to build RAID in BIOS?

by: Hystou | last post by:

There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

Computer Hardware

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...

General

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

C / C++

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...

Online Marketing

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

General

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...

Career Advice