we have been informed by our isp that our static ip was being blocked by the GOZI virus or a NAT was routing for a GOZI virus. our home office is where the static ip is. we have 23 vpn connections from our stores and other locations.theoretically this virus could be at one of those sites and passing traffic thru our office network. is there a tool that will help us locate which system this virus is on. we have malware bytes installed and updated on these systems. is there a bootable version that i could put on a usb drive and scan the system. we have windows 10 installed on most systems with local users.
currently i am running wire shark trying to locate the virus activity.
Any suggestions on how to locate this virus would be apreciated.because GOZI seems to be good at hiding.
