school network - 30 pc's all xp. 1 windows 2003 server.
dsl internet has been working on & off for the last few weeks.
there are definitely viruses in the system. alot of pc's had no av!! long story! using avg "free" now on all the pc's. (no money!!) paid version on the server.
tried a different router. no joy.
when i plug a laptop into the router, it's fine so i'm confident dsl & router are fine.
problem is internal!
is there a program i can run to see which pc's are possibly flooding the network with viruses?
all the pc's seem to be free of viruses but some could still be infected?
any ideas?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Run Perfmon on every machine.
See which ones are having high CPU and or Disk Usage.
Those should be your problem machines.
You could also use a network sniffer to see which machines are causing lots of network traffic. http://www.freedownloadsce
http://housecall.trendmicr
http://www.malwareb
I would recommend looking at Spiceworks (which is totally free) for having to support all of those PCs on the network. You can use it's remote desktop application to remotely access all of those workstations and run those anti-virus/anti-spyware applications on it from the comfort of your desk.
Spiceworks: http://www.spiceworks.com/
---
Once you get the virus problem straightened out on the network, another thing you need to look at installing (even in transparent bridged mode) is an Untangle Appliance server (yes it's free!) between your router and internal network.
Untangle :: Block Viruses at the Network Gateway
Stop virus outbreaks before they reach users desktops. With an intuitive GUI and the ability to scan multiple protocols, Untangle makes it easier for administrators to:
* Protect users from virus threats over web (http), email (SMTP, POP & IMAP) and file transfer (FTP) protocols
* Scan archives and compressed files like Zip, RAR, Tar and many others
* Ensure that signatures are always current with automatic updates
Untangle Site: http://www.untangle.com/
Although, it would be best to get an antivirus solution for small business to use on the network, but for the immediate problem, you can restart PCs in safe mode and then, scan with updated AVG definitions. That will help remove the viruses from PCs. MalwareBytes (as already suggested) will also help with removing the spyware from those PCs.
Kaspersky is a good antivirus for use on the network. The detection rate is extremely high.
If any computers you find are infected, please run MalwareBytes first of all. If the problem still remains, then also download SuperAntiSpyware (www.superantispyware.com)
Hope it helps.
May be worth a look
http://www.lansweeper.com/
thanks so much for all the replies!!
update. was going thru all advise today. no joy!
internet on for 10-20 mins approx, then off for 10-20 mins. on & off all day!! unpowered all switches etc. turned off 10 pc's at a time to try & isolate problem. did to all 40-50 pc's on network. all seem virus free now. when i just plug in 1 laptop to router, all is fine. so router & dsl is fine. when i plug router into wall point all hell breaks loose. tried different wall points. no joy. all was working perfectly until a week ago!! is there a way to identify a bottleneck or some hardware issue on the network? tried some of the programs eg untangle & spiceworks but found it very complicated!! anything idiot proof?/
Go old school. Get a network tester and start singling out each node on the network.
After that is addressed, start checking the switches to see if there is a bad uplink port.
Do you have any wireless devices that hook into the network (i.e. access points)?
If so, check these out as well for possible problems.
thks again for the ideas. unplugged all the wireless boxes. dont have any cables looping back. when the internet goes down the internal network is fine. all the pc's can access the server so this wud seem to discount it being a problem with the switches?? i could be wrong!! dns seems fine on the server. nothin to worry about in the event logs. when i isolate just a couple of pc's & the server & plug directly into the router the net works fine?? so internal network & dsl line & router seem fine. i have also tried all 4 ports at the back of the router in case one was faulty. am away for a few days but a collegue is working on it so i will keep u posted when we get a resolution!! many thanks again.
Business Accounts
Answer for Membership
by: ks_adminPosted on 2009-09-21 at 14:18:44ID: 25387736
The AVG may not be catching all of the infections, have you tried scanning one or more with another free tool called Malwarebytes Anti-Malware? I would scan at least a few of them with this tool, and see what the results are.
http://www.malwarebytes.or