Hi people,

The lan/wan we have at work recently caught the Welch virus (worm?) and we are presently removing it. Most likely, I am told, the virus was introduced into our system internally.

Computers (internally on our lan) are connected to each other through a hub and we all have internet connections. Everyone is using Win 2K.

While trying to remove the virus, I noticed that the netstat -a command produced some weird (unauthorized) connections on this one computer. Is this a sign that someone had hacked this particular computer? The connections are from AT&T and a couple of other communication agencies.

Also and without logging on to the internet, popups (casino and travel ads, etc.) appear from nowhere. I had to go to Task Manager in order to stop/close the popups. Is this another sign of a computer being "owned" by someone, other than the authorized owner? Would appreciate any insights you have on what you think is going on with that computer. Would also be thankful for any advise on ways to prevent/stop the computer from making connections to other computers, without permission.

P.S. Our wan has a firewall. No firewalls, however, on individual computers on the lan.