If the network is insecure and the virus scanner not updated regularly, it could have been attacked by a virus.

I wish I could say that computer consultancy companies have any level of expertise, but in my experience, sadly they do not. Many people get a small idea and think they suddenly know enough to dish out advice.

I'm afraid your fate is in the hands of these ignoramus, and there's not a damned thing you can do about it.