Posted 27 October 2009 - 12:25 AM
How will you know the difference between what the virus is sending out and what is normal traffic? If you suspect one PC is infected your best bet it to get them all scanned. There are viruses out now that can infect other PCs on the network.
If you know what you are looking for Wireshark will show it to you, its job is capturing packets and filtering that info for you. But if you are asking if it has a "Hey this is a packet from a virus" I don't think it does.
Hope this helps
Associate in Applied Science - Network Systems Management - Trident Technical College