ARP Virus kill tool Download _ virus

Source: Internet
Author: User
Tool Type: Integrated tools
⊙ operating system: All Windows systems
⊙ Tool Size: 1.95 MB
⊙ Date of submission: 2007-1-1
⊙ number of visits: 1590
⊙ Download Address: Download address
⊙ Tools Introduction
The symptoms of a computer infected with the ARP spoofing virus (Trojan) are as follows: 

The machine starts to surf the internet and constantly sends ARP spoofing messages, That is, the fake network card physical address to the same subnet other machines to send ARP messages, even fake the subnet gateway physical address to deceive other machines, so that the network of other machines to the virus host to the Internet, this from the real gateway to the fake network concerns in the process of the other machine will break the network. If the virus machine suddenly shuts down or goes offline, the other machine will search for the real gateway again, and then break the network again. So it will cause a subnet as long as there is one or more such a virus machine, it will make others on the Internet intermittent, serious when the entire network will be paralyzed. The virus (Trojan) in addition to affecting others to the Internet, but also to steal the virus machine and the same subnet other machines on the user account number and password (such as QQ and online games and other accounts and passwords) for the purpose, and it is the ARP message, has a certain degree of secrecy, if the system resources are not very large, and no anti-virus software monitoring, Common users are not easy to detect. The virus began mainly in the student dormitory, according to a recent survey, has now been in the office area and the staff of the residential area spread, and is more and more fierce.
A sample test, the school provided by the Symantec Antivirus Software Enterprise version 10.0 can effectively detect the known ARP spoofing virus (Trojan) virus. Malware because of the lack of a clear international definition, currently no anti-virus software can provide 100% to eliminate its attack solution, the need to use some auxiliary tools to clean.


ARP virus prevention solution
to reduce the impact of machines that have been infected with the ARP spoofing virus (Trojan) on normal machine access, each user is statically bound to the IP and physical address of the gateway, which is:
Enter the MS-DOS window when normal access to the Internet, Enter command: arp -a to view the correct physical address of the IP of the gateway and record it. If you are unsure whether the physical address of the gateway is the actual gateway physical address, you can also consult the Network Center. Create a batch file Arpbinding.bat, which reads as follows:
@echo  off
arp -d
arp -s  Gateway ip  Gateway Physical Address
(Note that The "Gateway IP" and "Gateway Physical Address" in the batch file above will be saved with the "Gateway IP" and "Gateway Physical address" you have found, run this batch file   and drag the batch file to the windows→ start → program → boot.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.