Connecting PC possibly infected with malware to network - restricting access

[AD-15]

Hello,

When adding a PC that is possibly infected with malware to a home network, is there any way to protect other machines on the network from infection? Maybe by restricting access on that PC to the rest of the network?

My PCs all have updated AV software (KIS 2013) on them (apart from the possibly infected one, which belongs to a guest) but as they are setup on a 'home' network through Windows, and 'local network' rules on KIS, I'm wondering if this would make any difference.

Would appreciate any tips others may have!

Thanks

[Splash]

I assume you're connecting it to clean it up? In which case I'd look at a livecd/USB that you can update AV defs before burning - something like http://www.f-secure.com/en/web/labs_...ousel/view/142 to cleanup the machine before connecting it to your LAN, unless you have a router with some kind of funky VLAN options.

[AD-15]

Actually, the system is a laptop belonging to a guest of mine who I know is pretty lax about these things. They need internet access while staying with me.

[Phage]

No scan - No password.

[stilkun]

If your guest planning to use wi-fi only, setup guest wi-fi network if your wireless AP/router has this feature.