General discussion

Locked

Network problems

By sparklenz ·
Hi, this is a problem in a school. Looks like a worm or virus that shuts down the router and causes network problems. In some machines it brings up dickmagazine in Internet Explorer.

Seems to be using allot of ARP.

Can someone please advise.

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
Thread display: Collapse - | Expand +

All Comments

Collapse -

by Chud In reply to Network problems

Are you sure the router is being shut down and is not just being swamped perhaps by ICMP traffic?

Obvious steps to take is to physically disconnect the connection to the outside and install/update anti-virus software across the network, if not present then install a firewall of some description and make sure all machines have all(assuming a windows network) security/critical updates installed. Any more detailed information will require more detailed information on what is on the network in terms of hardware/software.

Collapse -

by sparklenz In reply to

We still haven't solved it yet. Anyway we notice that we pluc a mac into the network and use etherpeek and the ARP seems to be going 100%
We also note that when the router is off there are several local ip addresses that are putting in a constant 4-7% usage then when the router goes on it seems randomly one will go to 100% and flood the router. Not sure what traffic or how to tell what sort of traffic. BTW the network is TCP/IP ethernet based network. Pretty standard with a Windows 2000 server. But the other machines are running XP or are Macs... of course the macs aren't affected it seems to be a Windows virus or worm. Will try on monday to see if another AV update fixes it or if there are any update patches for windows that haven't been installed.

Collapse -

by queen1 In reply to Network problems

Sounds like one or more of the machines have there home pages "hijacked" try using hijackthis or cwshredder. It's a spyware problem.

Collapse -

by sparklenz In reply to

OK well it wasn't quite that. But it was a virus that had hijacked the homepage. So close.

Collapse -

by wlbowers In reply to Network problems

You are going to have to shut down your network while you get rid of this troll.

If you have to load all of these on to a cd.

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software

Spybot:
http://tinyurl.com/ziar

Ad-Aware:
http://tinyurl.com/tek5

Stinger
http://vil.nai.com/vil/stinger/
This item will not update through the program. You have to download the new version.

CWshredder:
http://tinyurl.com/2bzef
Or
http://tinyurl.com/2k642
Look for the file in English CWShredder.exe

StartUpList:
http://www.mac-net.com/576482.page

StartUpList give you information from startup, registery, and more. It will not fix, but it will tell you what is running.

Hijack This:
http://mjc1.com/mirror/hjt/

Hijack This is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure.

Items you are not sure of do a Google search for them.

Run Your Antivirus again

I have had to boot into safe mode and run these.

Good Luck Lee

Collapse -

by sparklenz In reply to

This answer is much more comprehensive so I've given it the "Helped me" rating. :)

Collapse -

by sparklenz In reply to Network problems

This question was closed by the author

Back to Desktop Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums