Re: How to determine a bad desktop

I ran into something similar a few months ago at a business that I frequent. I installed Malwarebytes' Anti-Malware program. It is available at malwarebytes dot org web page.

HTH,

Nick Mart


----- Original Message ----- From: "Pat Barber" <mboceanside@xxxxxxxxxxxxxxxx>
To: <PcTech@xxxxxxxxxxxx>
Sent: Wednesday, January 21, 2009 8:41 AM
Subject: [PCTECH] How to determine a bad desktop

I have a customer with a very basic LAN, with no pc server, just a
collection of
20 or more pc's all running XP. They are all using Access to get the
Iseries.

They also have 3 bonded T-1 lines and a Sonic Wall firewall installed by
Verizon for internet service.

This has all worked very well for the last 18 months. We have had NO virus
activity to my knowledge.

On Monday of this week, the internet started acting up and running VERY
slow.
we assumed it was just the ISP(Verizon) and got through the day.

It continued on Tuesday and I called the T-1 guys and told them we had a
problem. They said the lines were fine and it was probably a firewall
problem.

I called the firewall guys(Tek-Secure Labs) and they said, the firewall
was fine
but we had something on the lan that was filling up the buffer and
making the
firewall act up.

They said it "could" be a desktop with a WORM virus that was
causing excessive broadcast traffic, which was our problem.

The firewall is supposed to do content scanning but apparently
something may have been sent by a customer in some email traffic
that got through.

I know nothing about firewalls, which is why we hired Verizon to handle this
but now we are in a finger pointing contest over what is wrong.

What sort of hardware/software is available to determine which laptop is
causing the
problem ???

They gave me a few "suspect" ip addresses of pc's that "might" be
causing the problem.







--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.

--------------------------------------------------------------------------------



No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.176 / Virus Database: 270.10.10/1905 - Release Date: 1/20/2009 2:34 PM