VIRUS on computer. Please help.

[alien amp pharm]

We have an infected computer on our network.

The virus was found and removed by AVG Antivirus, but the problem still remains apparently.

We don't remember the virus name, but it was "backdoor something" and it is really messing with our internet activity (sent/received) to the point which we cannot load pages.

Anybody know how to get this thing off the computer so it stops messing with our internet???

Help is greatly appreciated.

 

[the nature boy]

how do you know the problem is still there?

 

[jh1]

Have to know the name to be of help. There are too many viruses with Backdoor in the name.

Try going to housecall.trendmicro.com with the computer and do a scan, get the name.

 

[alien amp pharm]

how do you know the problem is still there?

Well the guy ran AVG. It detected it and removed it.

Now his computer, when connected to the network, sends and recieves packets via internet at an alarming rate.....enough to where the internet is almost unusable.

If the virus is not still there, it sure messed the computer up somehow. Whenever that particular computer is not connected to the network, all other computers run just fine (internet)

 

[the nature boy]

try running AVG in save mode. that worked for my buddy yesterday when he had a trojan that we couldn't remove with norton.

 

[alien amp pharm]

Ok, thanks guys I'll try those.

I'm currently running Norton 2004 pro fully updated to see if it finds anything, then I'll try the AVG safe mode.

You guys seem to understand how greatly EF will suffer if I am unable to post as often. I tip my hat to you.

 

[Becoming]

Now his computer, when connected to the network, sends and recieves packets via internet at an alarming rate.....enough to where the internet is almost unusable....Whenever that particular computer is not connected to the network, all other computers run just fine (internet)

Unhook that thing and throw it out the window... problem solved....

Unless of couse "he" is you...

 

[Code]

Wow, ONE machine is making your pipe unusable for your whole company?

ALWAYS take a machine OFF the network when it is suspect.

Put it out in the DMZ if you got to have it connected to download patches. But I'd burn patches to a disk and keep it isolated until it's clean.

 

[alien amp pharm]

Wow, ONE machine is making your pipe unusable for your whole company?

ALWAYS take a machine OFF the network when it is suspect.

Put it out in the DMZ if you got to have it connected to download patches. But I'd burn patches to a disk and keep it isolated until it's clean.

Arrgh!

Both AVG & Norton do not find anything on the computer.

The windows updates, patches, are all up to date.

The upload on this thing goes from 500 to 800 bytes/sec sent.
(we have dsl and only 4 computers on the network).

Do you think a bandwidth limiter would work?

 

[Deterass]

If all of your computers are networked theres a good chance they all have it.

This happened to my company about two years ago,it got all of the networked pc's.

 

[Code]

Re-image it.

Arrgh!

Both AVG & Norton do not find anything on the computer.

The windows updates, patches, are all up to date.

The upload on this thing goes from 500 to 800 bytes/sec sent.
(we have dsl and only 4 computers on the network).

Do you think a bandwidth limiter would work?

 

[the nature boy]

2 more possibilities... I'm probably reaching here

either the network card is sort of fucked up and it's sending out junk packets

or

it's the netbios protocol and it's more fucked up than usual and it's flooding your network.

if you have a protocol analyzer trap some packets coming from that computer and maybe you'll see what it's doing.

 

[alien amp pharm]

Ok, back now. I got everything backed up.

Code,

I know what you are talking about with the reimaging, but I've never performed that task before. Is there somewhere simple I go into to start it? Do I have to have the original operating disk, or can a copy of the same OS suffice?

 

[alien amp pharm]

Well the computer guy is coming by tommorrow to see how to solve it.

He's switching out the network card to start with, then go from there. He said we may have to reinstall the OS on it.

Anyways, thanks for the help guys. Karma on the way.

 

[Code]

If you got it from a vendor, it has a repair disk. Your work doesn't sound big enough to have ghost images laying around.

Ok, back now. I got everything backed up.

Code,

I know what you are talking about with the reimaging, but I've never performed that task before. Is there somewhere simple I go into to start it? Do I have to have the original operating disk, or can a copy of the same OS suffice?