network Utilization is spiking on SBS2003

Hi Experts,

We have a SBS2003 dell server. I was told that server has been slow and i ahve found out that network utilization is spiking sometimes to 50%.  
we have recently put trend micro worry free 7 antivirus on the server and client machines. So dont know if something to do with with  that.
I have put wireshark to see what is going on. I can see alot of errors on SMB prootcol but not sure what that could be. I am attaching the screenshot of wireshark.

Any help me with this will be appreciated as i am stumped on this.

Thanks,
Rafi wireshark
Rafi001Asked:
Who is Participating?
 
Rob WilliamsCommented:
If you suspect a PC you might want to run more than just Trend as a clean up. Perhaps TDSSkiller to check for RootKts and Malwarebytes for Spyware.
http://support.kaspersky.com/faq/?qid=208280684
http://www.malwarebytes.org/products/malwarebytes_free
0
 
Rob WilliamsCommented:
Make sure you have Trend fully patched with updates. There were a lot of problems with Ver 7.x on SBS to the extent most people were reverting back to 6.x it, but that was a few months ago, I assume that has be resolved with updates.

It does look rather "chatty" however there is a lot of SMB traffic within a typical SBS network anyway. Is the excessive SMB traffic limited to these 3 devices (192.168.0.2, .231, & 232? or between most devices?
0
 
Rafi001Author Commented:
Hi RobWill,

Thanks for your comments. I have put the latest patch on the server for trend micro. I assume that i dont have to install any patches on the client side manually. This hasn't help me reducing the server high network utilization.
This is a small network anyway with 10 clients and there is SMB traffic from other clients as well. but these IP's show mostly in the network scan. I was thinking if there is some sort of virus on the network?
0
Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

 
Rob WilliamsCommented:
A virus is a possibility. That is why I was asking if it was primarily a couple of PC's causing the traffic.
Then again Virus scanning when coupled with Trend Management does quite a bit of "chatting" as well.
0
 
Rafi001Author Commented:
Thanks RobWill,

I will check again in more detail and will get back to you with observation.

Thanks
0
 
Rafi001Author Commented:
Robwill,
After running the scan of malware bytes and stinger from mcafee, the viruses were removed and system seems to be working fine now.
Thanks for all your help.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.