Consultation: Most computers in the LAN can not access the Internet, but not on the network of the machine Ping gateway is through. I initially estimated that the ARP virus, but how to remove the ARP virus has become the most headache things.
Answer: Your judgment is correct, is in the ARP virus. Manually find the host infected with the ARP virus too cumbersome, you can use the Network Monitoring tool, look at the local area network of which host ARP packet special. The use of ARP protocol attacks will generally appear mac the same user, if the hands have a Mac table that can correspond to find.
I suggest you in the LAN all the host installed ARP defender, so even if there are machines to attack also die. The ARP defender can intercept illegal ARP packets from the source of the virus.
It is driven by the bottom core of the system, and it starts and runs in the form of service and process, and does not occupy computer system resources. There is no need to bind the computer to IP addresses and MAC addresses, thereby avoiding a large and ineffective workload. Nor do you worry that the computer will create a new ARP cache list after restarting.