Re: How to determine a bad desktop

["Nick W Mart" <nickmart@xxxxxxxxxxxxxxx>]

I ran into something similar a few months ago at a business that I frequent. 
I installed Malwarebytes' Anti-Malware program. It is available at 
malwarebytes dot org web page.

HTH,

Nick Mart


----- Original Message ----- 
From: "Pat Barber" <mboceanside@xxxxxxxxxxxxxxxx>
To: <PcTech@xxxxxxxxxxxx>
Sent: Wednesday, January 21, 2009 8:41 AM
Subject: [PCTECH] How to determine a bad desktop


> I have a customer with a very basic LAN, with no pc server, just a
> collection of
> 20 or more pc's all running XP. They are all using Access to get the
> Iseries.
>
> They also have 3 bonded T-1 lines and a Sonic Wall firewall installed by
> Verizon for internet service.
>
> This has all worked very well for the last 18 months. We have had NO virus
> activity to my knowledge.
>
> On Monday of this week, the internet started acting up and running VERY
> slow.
> we assumed it was just the ISP(Verizon) and got through the day.
>
> It continued on Tuesday and I called the T-1 guys and told them we had a
> problem. They said the lines were fine and it was probably a firewall
> problem.
>
> I called the firewall guys(Tek-Secure Labs) and they said, the firewall
> was fine
> but we had something on the lan that was filling up the buffer and
> making the
> firewall act up.
>
> They said it "could" be a desktop with a WORM virus that was
> causing excessive broadcast traffic, which was our problem.
>
> The firewall is supposed to do content scanning but apparently
> something may have been sent by a customer in some email traffic
> that got through.
>
> I know nothing about firewalls, which is why we hired Verizon to handle 
> this
> but now we are in a finger pointing contest over what is wrong.
>
> What sort of hardware/software is available to determine which laptop is
> causing the
> problem ???
>
> They gave me a few "suspect" ip addresses of pc's that "might" be
> causing the problem.
>
>
>
>
>
>
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing 
> list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.


--------------------------------------------------------------------------------



No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.176 / Virus Database: 270.10.10/1905 - Release Date: 1/20/2009 
2:34 PM