virus question

[glen]

I have AVG installed.
i seem to get a nimda virus once a week.
How can I figure out where it is coming from?

 

[RSI]

<< I have AVG installed.
i seem to get a nimda virus once a week.
How can I figure out where it is coming from? >>

How can't you? Are you still infected?

-RSI

 

[glen]

Well, the program detects them and shows the folder where they reside, and then places them in a vault.
At no time do I see a messge that says, so-n-so sent this, or www.thissite.com sent it.

 

[glen]

anyone know more?

 

[OZEE]

hmmm ... sounds like you need to install the security patch...

Check out McAfee or Antivirus.com for info.

 

[Zim Hosein]

glen, what's AVG?

 

[Whitecloak]

avg is a freeware anti-virus software. check it out here!

 

[Zim Hosein]

Thanks for the link whitecloak

 

[Tominator]

PC-Cillin

Better that Norton imho....

 

[glen]

Anyway, how does one use AVG to find out the source of the virus or does it even do that?

 

[guyver01]

SARC advisory on NIMDA

The worm sends itself out by email, searches for open network shares, attempts to copy itself to unpatched or already vulnerable Microsoft IIS web servers, and is a virus infecting both local files and files on remote network shares.

 

[Tominator]

Once you have made sure you are indeed 'clean,' run a program with a full time scan. That should prevent another infection. Most programs will tell you the infected file and by tracking the program it is associated with you might track down the culprit.

Also on the above link you can research the type of virus and it's method of infection.

 

[glen]

Right, I sort of understand the meathod of infection.
What I want to know is, are any of the web site I visit, like here (unlikely) infected?
Who sending me email is infected?

 

[Tominator]

Unless sent via a cookie, I can't see how you could become infected just by surfing.

Some Warez downloads contain viri and email is the main culprit. Again, a full time scanner should prevent either unless you executable and then if that is an attachment a good proigram will detect that as long as the pattern is up to date.

In your case, I'd run the AVG you have, then go to the link I posted and let it scan your system as well. Nothing is 100% effective.