System anomalies caused by Wifinat64.sys

This afternoon received a customer report, the server network is not available, the system can not remote, log in far after the discovery system blue screen, prompted as follows:

650) this.width=650; "Src=" https://s4.51cto.com/wyfs02/M01/8C/AE/wKioL1h0jrGTamQiAAVDnRIkeJ8310.png-wh_500x0-wm_ 3-wmp_4-s_2065847258.png "title=" image 1.png "alt=" wkiol1h0jrgtamqiaavdnrikej8310.png-wh_50 "/>

In this case, normal operation is Reboot ! However, after restarting, choose Normal Startup 2008R2, and the following tips:

650) this.width=650; "Src=" https://s1.51cto.com/wyfs02/M02/8C/B1/wKiom1h0jsvw_99hAABKYkxUF-o207.png-wh_500x0-wm_ 3-wmp_4-s_3557676697.png "title=" image 2.png "alt=" wkiom1h0jsvw_99haabkykxuf-o207.png-wh_50 "/>

just at the beginning did not pay attention to prompt in the following problematic file, and restarted the side, after a series of operations, repair boot, view raid status, view system files, but has not been resolved, each reboot to the repair interface. Look again carefully, found \windows\system32\drivers\wifinat64.sys This hint of suspicious, is this file "Wifinat64.sys "Because it is a service WiFi What in itself is not needed, and then copy the file name Baidu query a bit:

650) this.width=650; "Src=" https://s4.51cto.com/wyfs02/M02/8C/AE/wKioL1h0juCjBno_AAAQzsT7CwQ938.png-wh_500x0-wm_ 3-wmp_4-s_1204234000.png "title=" image 3.png "alt=" wkiol1h0jucjbno_aaaqzst7cwq938.png-wh_50 "/>

so we finally suspect that the client installed the software on the server that is not available on the service, and that the software was caused during the upgrade process, so we used PE enters the server system disk and renames the wifinat64.sys file (the customer's things are renamed without advocating deletion if there is a problem). The problem is resolved after rebooting the reboot. Finally enter the customer Service Discovery Client Server installed a large number of useless software, which caused this failure is 160wifi this software:

650) this.width=650; "Src=" https://s5.51cto.com/wyfs02/M00/8C/B1/wKiom1h0jvjTiriBAABJF_HXG7M250.png-wh_500x0-wm_ 3-wmp_4-s_4048966217.png "title=" image 4.png "alt=" Wkiom1h0jvjtiribaabjf_hxg7m250.png-wh_50 "/>

, and finally here, to remind you dear customer, the server belongs to the precision equipment, his purpose is to provide services on the Internet, do is a service-side role, if installed a large number of client software, patch updates or software upgrades in particular caused the system file error situation.

this case would like to draw your attention.

System anomalies caused by Wifinat64.sys