The network is intermittent

Symptoms after an ARP attack.

The poisoning phenomenon of ARP spoofing Trojan is manifested as a sudden drop in connection when using the LAN, and then returns to normal after a period of time. For example, the client status frequently turns red, users frequently disconnect from the network, IE browser frequently errors, and some commonly used software malfunctions.

If the Internet is accessed through identity authentication in the LAN, the phenomenon that the Internet can be authenticated but cannot be accessed suddenly (the gateway cannot be pinged), and the Internet can be resumed after restarting the machine or running the command arp -d in the ms-dos window.

The ARP spoofing Trojan only needs to successfully infect one computer, which may cause the entire LAN to be unable to access the Internet, and in serious cases, it may even bring the entire network down. In addition to causing other users in the same LAN to surf the Internet intermittently, the Trojan also steals the user's password. Such as stealing QQ passwords, stealing passwords for various online games and doing money transactions, stealing online banks to do illegal trading activities, etc., this is the usual trick of Trojans, which has caused great inconvenience and huge economic losses to users.

ARP Attack Principle.

ARP attack is to achieve ARP spoofing by forging IP addresses and MAC addresses, which can generate a large amount of ARP traffic in the network to block the network, and the attacker can change the IP-MAC entry in the ARP cache of the target host as long as the attacker continuously sends out forged ARP response packets, causing network interruption or man-in-the-middle attacks.

If a person in the LAN is infected with an ARP Trojan, the system infected with the ARP Trojan will try to intercept the communication information of other computers in the network through "ARP spoofing", and thus cause communication failures of other computers in the network.

Because my notebook has a similar phenomenon, but the desktop does not, I will give you a list of several possibilities, and the specific method you should deal with accordingly:

1.Virus: Someone else's computer implements ARP impact on your computer, so it causes your network connection to be interrupted, the way to identify is to change the computer out of the location by yourself, if the phenomenon still exists, then exclude, if you still continue to install the ARP LAN firewall first.

360 Security Guard has one of these).

2.Hardware: The network cable is not in good contact with the computer or router, which is not necessarily unstable at this time, and sometimes it is necessary to change the interface or replace the network cable.

The most troublesome thing is that the computer network card is not working properly, which may be due to high temperature or contact (or connection) between the network card and the motherboard.

3.Software: Update the driver of the NIC again. (Although I can access the Internet, since it is unstable, let's do more work).

These are the possible causes of failures, and it is recommended to follow the above order, as the frequency of failures also decreases sequentially.

The next 360 security guard, and then turn on the ARP attack firewall inside, he will block the attack himself.