What is the virus that automatically connects when the network is disconnected?

Maybe there is no virus, bad contact or bad signal.

This one is not a virus, it's completely normal :

It is the function of automatic redial after the network connection is dropped, you can set it to not automatically connect, but no one does this, it is generally set to automatically redial and automatic connection after the connection is dropped.

It's not a virus! I've never heard of this virus! It's not okay with a network cable! Or contact is not good! Let's see if the crystal head is loose!

Recently, our company found that some users have disconnected from the Internet, according to Microsoft's relevant security bulletin, this is due to the user's PC Windows operating system has not been patched, the system has vulnerabilities, when attacked by network worms, there will be Internet disconnection, can not access the web page and other failures. To this end, our company provides the following solutions, please check in time and apply relevant patches to avoid being affected by the Internet.

Microsoft released multiple security bulletins for August 2006 that fixed multiple security vulnerabilities at the emergency level. MS06-040 security advisory fixes a remote overflow vulnerability in the server service, which can be exploited by an attacker to remotely invade and take full control of the operating system. The worm exploiting this vulnerability has begun to spread widely, and the worm may install a backdoor on the infected host, and the computer infected with the virus may have the following phenomena:

1) The network access is abnormal. For example, after dialing up to access the Internet, you cannot open a web page.

2) Internet access is often disconnected, you can't dial again after disconnection, and it will return to normal after restarting the computer. The same failure occurred shortly after dialing again.

We strongly recommend that users of Windows operating system immediately check if your system is affected by this vulnerability and follow the steps provided to resolve the vulnerability.

1. Please install the relevant patches as soon as possible for users who have not yet installed the patches. Major virus vendors have increased the detection and killing of this worm, and users who have been infected should upgrade to the latest virus database for detection.

The computer broadband client has been disconnected recently. Prompt that the client encounters an abnormal situation, the client software used to network the network, it may be that there is a problem with this software, it is recommended to uninstall it, re-go to the official website**, and then reinstall it to observe. Or consult the network ** provider and ask them what caused this situation and how to solve this problem.

Teach you a few ways to solve the problem of automatic disconnection of the computer, and no longer have to worry about suddenly disconnecting the network in the middle of playing.

You see if your connector is connected correctly, in that splitter, if there is a time when the connection is dropped, it really doesn't work, just ask the telecom person to show you, and you don't have to spend money to change anything.

Change the network card, dozens of dollars, cheap.

You should have been hit by the Devil's Wave (virus. As a new variant of the IRCbot family of viruses, the virus mainly exploits the MS06-040 vulnerability to actively spread and aggressively attack the Internet, which can cause system crashes, network paralysis, and accept the control of hackers through the IRC chat channel.

After the Devil Wave Dust Wisdom runs, it can generate m% files, add system services as wgareg, and reduce the system security level by modifying the registry information, connect to the IRC channel designated by the hacker, and control the user's computer.

Post-poisoning symptoms:

1.After running, an m% file is generated, the system is added to the system to wgareg, and the system security level is reduced by modifying the information of the sensitive pretend table.

2.Connect to the IRC channel designated by the hacker to control the user's computer;

3.The system service crashed and the internet was not available.

win2000 sp4

winxp sp1

winxp sp2

winxp professionalx64windows server 2003

win server 2003 sp1

You can use the latest version of antivirus software to check whether it is a virus problem. If it is confirmed that it is not related to the virus, you can also use the Ruiju Ruler Star security assistant to conduct an immediate physical examination and one-click positive height repair to detect whether there is any abnormality.

There is also the ability to update the network card driver to see if it works. After the final dismantling, you can contact the staff of the broadband handling to check whether it is a network problem.

I'm not sure what kind of virus this is, but since it will automatically disconnect the broadband link, then you must not be able to kill the virus under the normal mode, you can restart the system, press F8 to enter the safe mode with the network, the virus cannot run under the safe mode, so that you will not be disconnected from the network of a computer manager, use the anti-virus function of the computer manager to check and kill the whole thing, remove the virus.

If it's often disconnected, but there is a virus, Devil Wave can kill any antivirus software now!

When the computer is not operated for a long time, it will automatically disconnect, which is normal!

It's normal to interrupt sometimes, just connect to it.

ARP virus

There are two types of ARP spoofing: one is to spoof the router ARP table, which intercepts gateway data. Notify the router of a series of wrong intranet MAC addresses, and continue to do so according to a certain frequency, so that the real address information cannot be saved in the router through updating, and as a result, all the data of the router can only be sent to the wrong MAC address, resulting in the normal PC cannot receive the information, resulting in disconnection or inability to access the Internet when surfing the Internet; The other is gateway spoofing of the intranet PC, spoofing the MAC address of the gateway, sending ARP packets to deceive other clients, and letting the PC deceived by it send data to the fake gateway, instead of accessing the Internet through the normal router, resulting in disconnection or failure to access the Internet when surfing the Internet.

In response to this situation, Ruixing provides the following solutions:

Method. 1. On the machine that receives the ARP spoofing, in the Start--Run, enter "cmd", enter MS-DOS, and enter the "arp -a" command through the command line window to view the ARP list. You will find that the MAC has been replaced with the MAC that attacked the machine, record the MAC (in case you need to find it), and then find out the computer with the virus based on this MAC.

Method. 2. Use a third-party packet capture tool (such as SNIFFER or AntiARP) to find the IP address that sends the most ARP packets in the LAN, and you can also determine the computer with the virus.

The virus that causes ARP spoofing is actually an ordinary virus, which can be completely solved as long as you determine the source of the starting package and use antivirus software to check it. ‍‍

Change a router, package hello, I have also had such a problem、

Buy a router with a number point.

Are you located on a local area network? It should be an ARP attack.

If the same line is not connected to the computer, one is faulty, and the other is normal. That's that there is a problem with the computer in front :

1) If there is interference or incompatibility with the network in the background program of the system, try to reinstall the network card driver to repair the network settings, or directly reinstall the operating system;

2) If there is a problem with the network hardware, it is the failure of the integrated network card. The only solution is to buy an external network card.

Supplementary answer: You said that it is not a family or two, if there is such a situation in a range, it is a problem of the network provider, and the router or switch is unstable. It is recommended to jointly find a network provider to solve the problem.

Repair the computer, there is a problem with the computer.

691 Access denied because the username and/or password are invalid within the domain.

I don't know, and a lot, the attack is okay. Grey dove.