So an ISP who’s name will not be released has been breathing down my neck for months about spam messages being sent out from one of my clients buildings. The spam emails show an originating IP that matches the external IP of the clients building. So i did some network scanning and tracked it down to a particular computer on the LAN subnet, and ran all sorts of scans on that pc (Malwarebytes, Ad-aware, trendnet, AVG, Spybot, etc etc) and they all came up clean. The only thing I didn’t like was a program that was downloading a new wallpaper from the internet every x amount of time. So i removed that.
3 weeks and no complaints.
Now, I receive a phone call from the ISP again saying I have until the 10th to resolve the problem or my clients internet will be shut off. They had another complaint on the 7th. What would you guys do at this point? I can’t make an on-site visit, they are a 6 hour drive away and it’s not possible with the amount of time I have. All I can do is remote sessions with logmeinrescue. What can I try?
