How about applying all Windowsupdates ? and best changing all passwords (at least definitely for those PCs that got infected or did initiate portscans…!!! )
What OS/Win-Versions are used anyway ??