Detecting possible virus...any help appreciated

gadzilla1

Hello all,

At midday yesterday, our network experienced virus issues that occurred on multiple PCs. At the same time NAV performance dropped considerably, particularly in shipping. Processes that would take seconds now are taking a couple of minutes.

Have any of you experienced similar issues - if so what are the steps you took to address?

Thank you. Chris

slmaluwa

Hi there!

The answer is in your post. If there is a virus attack, clean them first. Check specially the server. If there are lot of disk activities and RAM is filled, them the process/commit will be very slow in NAV.
Also, if the VIRUS tries to spread and flood the network, the server client response time will be very looooooong.

So, my advice is to separate the server and check for possible trace. If it is clean, then clear your networked PC before connecting the server to the network. Usually, on a large spread virus attack, we segment the network and clean the machines one by one before connecting them again.

Also, check you SWITCH for unusual activities (if it is a high end one).
HTH

gadzilla1

Thanks much for the reply.

Currently our shipping department runs three PCs. We've swapped out one with a spare that was not on the network when the virus hit. We'll run NAV processes from that PC to see if performance is improved.

(it appears at this time that the virus has only infected individual PCs...the thought is that an unaffected PC will have increased performance)

Thanks - Chris

Savatage

We've recently run into a slowdown too. It turns out our Hub & Switch were dying. Got a new 48 port super switch \:D/

All is well again. I assume a virus program spotted the intruder?
or are you assuming a virus based on the slowdown?

gadzilla1

Hi Harry,

It was a virus that was detected. It threw things out of sorts for a bit but our help area seems to have everything sorted out.

Thanks again - Chris