help with virus

[Paul]

My entire LAN was infected with virus ( I don't know the
name ). Whenever I reboot each computer it start to send
ICMP messages to everybody on the LAN. I stop sending
this messages on WIN XP machine, because XP give me PID
when I use "netstat -n -o" command. But W2K does not have
this option and I cannot stop sending this messages.
Does anybody know how to get read of this virus or, at
least, stop this process on Windows 2000?

Thanks a lot.

 

[Steven L Umbach]

Hi Paul. You need to pull each machine off of the network and then remove the virus
and patch it before putting it back on the network. You also need to review you virus
protection procedures including scanning all emails, use a firewall or check it's
configuration, and plan a way to keep your computers up to date with critical
patches. If you have a firewall, it is possible a laptop or vpn user introduced the
virus to the lan. Fport [free download] can do what XP netstat can do and more. ---
Steve

http://securityresponse.symantec.com/
http://www.ibiblio.org/security/articles/fport.html
http://www.microsoft.com/security/
http://securityadmin.info/faq.asp#harden --- From FAQ.