Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm not much of a network and network security expert, but I need to add an existing Windows PC to a network with always on connection.

The problem is, I have no idea if the PC is really clean, and, actually, no knowledge to check it.

I scanned the PC with Process Explorer to verify if all running processes are signed, ran an AVG scan, but this is where my knowledge ends.

IIRC, there can be bad code attached to svchost or something, bad drivers, and so on, but I have no idea how to check all those things.

Reformatting the PC is unfeasible as of now. Are there any suggestions on what I could do?

share|improve this question

closed as off topic by Dan, Zoredache, dunxd, Greg Askew, MDMarra Sep 23 '12 at 3:21

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

A golden rule: treat your network like your daughter. You wouldn't want a dodgy guy being plugged into her. Who knows what diseases can spread from there :)

In normal language: Don't trust it? Don't put it in the network.

share|improve this answer

It'll probably take longer than its worth and require quite a bit work work but there's a few things I can think of. To start with it helps to actually know what kind of threat you're looking for, and no one tool is infallible

Firstly make sure every single process running is known. Yes, look through them all. Check all the services on the system - here's microsoft's default list and the blackviper list. Check for rootkits, with rootkit revealer and gmer, then do another check with an offline disk. Check processes with process explorer

Run a few more malware scans to be sure (I tend to favour malwarebytes) including a few offline ones (microsoft system sweeper perhaps?).

That covers most situations, tho you still can't be sure.

Better yet, just work off a known good, trustworthy system to start with ;)

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.