How to remove virus on a domian/ network

[Dell and Rodney]

Im curious to know what you guys think would be the best way of removing a virus on a domain or network configuration (Windows Server 2003). Assuming:

1. You have a Anti virus program installed

2. AV (anti virus) has stopped functioning due to the virus

what would be the best approach?

Cheers

[valter]

install another AV

[brian873]

depends on a few things.

Do you know what machines have the virus ?

YES

Take those machines of the network and do a bootstrapped virus check with updated files and if it was a new virus I did not know about I would double check with another AV software and do a google about it.

NO

Take all machines of the network and scan them with above process. I would start with the server as this normal takes the longest. Note down the PC's and files that are infected and see if you can put a chain together and see if you can find the source of infection.

This is just a basic overview as each network will be treated in its own right. But if you take virus prevention seriously, machines must be stand alone once they are known to be infected. Also a log check should be done atleast once a week to check for virus infection.

hail hail