Questions

Lost network connections, internet OK.

Tags:
+
0 Votes
Locked

Lost network connections, internet OK.

DoubleBarrel
I have 4 computers at 3 locations that have lost their connection to their servers. The internet works but no anti-virus/spyware will run or can be installed. The taskbar stays hidden and Malwarebytes gives error 372. All are XP professional with current SP3 installed. The had Norton or McAfee on and active/updated. Mapped network drives no longer available but server can be pinged from dos window.
  • +
    0 Votes
    OH Smeg

    Need their own AV products in place locally. The moment that they loose their connection tot he Server they are subject to infection and this could very well be what has happened here.

    A internal LAN is a different story as the moment that the workstations loose the connection with the server they loose the Net Connection as well and can not be infected. But Stand Alone Remote Sites are a different story and need to be treated differently to internal systems.

    Col

    +
    0 Votes
    DoubleBarrel

    Sorry for any confusion. The systems are hard wired through a Local Area Connection and have stand alone A/V protection. The Internet works fine, mapped drives are lost, the server can be pinged fine but the mapped network drive shows a lost connection. My taskbar can't be seen as well. Suspect some new virus variant.

    +
    0 Votes
    seanferd

    I can't say how good the logs might be, but you can look anyway. I suggest this because the amount of breakage sounds like the systems may have been infected, but then the infections were removed. Remove the file or entry which the malware had put in place of the system file or entry, and then you have nothing.

    Try some of the tools from SysInternals if you want to investigate - particularly Autoruns and Process Monitor.
    http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx

  • +
    0 Votes
    OH Smeg

    Need their own AV products in place locally. The moment that they loose their connection tot he Server they are subject to infection and this could very well be what has happened here.

    A internal LAN is a different story as the moment that the workstations loose the connection with the server they loose the Net Connection as well and can not be infected. But Stand Alone Remote Sites are a different story and need to be treated differently to internal systems.

    Col

    +
    0 Votes
    DoubleBarrel

    Sorry for any confusion. The systems are hard wired through a Local Area Connection and have stand alone A/V protection. The Internet works fine, mapped drives are lost, the server can be pinged fine but the mapped network drive shows a lost connection. My taskbar can't be seen as well. Suspect some new virus variant.

    +
    0 Votes
    seanferd

    I can't say how good the logs might be, but you can look anyway. I suggest this because the amount of breakage sounds like the systems may have been infected, but then the infections were removed. Remove the file or entry which the malware had put in place of the system file or entry, and then you have nothing.

    Try some of the tools from SysInternals if you want to investigate - particularly Autoruns and Process Monitor.
    http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx