ARP virus

Virus name: "ARP"-like virus
Virus Chinese name: "ARP"-like virus
Virus type: Trojan
Risk level: ★ ★ ★
Impact platform: Win 9X/ME/NT/2000/XP/2003

Description: ARP Spoofing-like virus (hereinafter referred to as ARP virus) is a special type of virus, the virus are generally Trojan (Trojan) viruses, does not have the characteristics of active communication, not self-replicate. However, due to the time of their attack to the whole network to send forged ARP packets, interference with the operation of the whole network, so it's damage is much worse than some worms. By forged IP address and MAC address ARP deception to achieve, can produce large amounts of ARP network traffic so that network congestion or the realization of "man in the middle" for ARP redirection and sniffing attacks. With forged source MAC address to send ARP response packet, the ARP cache mechanism of attack. When a LAN host Trojans to run ARP deception, it will deceive all hosts and routers within the LAN so that all Internet traffic must go through the virus host. Other users had access through a router now directly transferred to the host computer by the virus, when the user switches off the first line. Switch to the virus, the host computer, if the user has landed a legendary server, then the virus host will often break the illusion of false, then the user must log back legendary servers, so the virus can Daohao the host.