Is this a virus attack?

[dullard]

My entire department is having unusual computer problems. Powerpoint, Mathcad, Netscape load 10 minutes after we ask them to load. One computer has sporatically decided to ignore the keyboard. Word has crashed during saves. Web pages are slow (but this likely has to do with a Gorbachev talk being webcasted). Everyone is complaining. This spans all Microsoft operating sytems. My only thought for a department wide computer problem is a virus. Any ideas?

McAfee VirusScan v4.5.1 (March 6, 2002 definitions) doesn't find anything.

 

[n0cmonkey]

How is the network utilization? Are these programs being run locally or over the network? Rebooted lately?

 

[dullard]

Local programs, all of the computers I've been around have rebooted to no avail.

 

[n0cmonkey]

Any logs? And on some of the systems, some wierd networking juju could be messing with the systems. I know a lot of broadcasts can slowdown DOS (win9x) machines pretty bad sometimes.

 

[dullard]

Logs of what? Most computers are WinNT.

 

[n0cmonkey]

<< Logs of what? Most computers are WinNT. >>



WinNT should keep logs of whats going on in the system. Also, if you have some baseline measures of the load on the systems when they are working well/working but not doing anything, compare those to what is currently happening on the sytem.

 

[dullard]

Sorry for the delay. Network is slow.

Here is an example of a Win2k information:
Save Dump
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c5 (0x00000000, 0x00000002, 0x00000000, 0x8046bd32). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini031402-01.dmp.

Here is an example of a WinNT problem:
i8042prt Error
Exceeded the allowable number of retries (configurable via the registry) on device \Device\KeyboardPort()

Another WinNT computer with unusual log:
BROWSER information
The browser has forced an election on network \Device\NetBT_N1001 because master browser was stopped.

The other computers I don't have access to after hours, but these 3 logs appeared today and not on any other day.

 

[n0cmonkey]

Another WinNT computer with unusual log:
BROWSER information
The browser has forced an election on network \Device\NetBT_N1001 because master browser was stopped.

Sounds like a server issue on the network to me, but all I really know about windows is that they get dirty really easily and I hate washign them.

 

[dullard]

I just checked on a Win98 computer: it won't come out of standby when it has never failed to come out before. (Yes I know standby on a desktop is bug ridden). It wouldn't have a decent log anyways.

Thanks for your interest.