Forum Home
Press F1
 
Thread ID: 28702 2002-12-28 10:57:00 tracking source and effects of worms rugila (214) Press F1
Post ID Timestamp Content User
109521 2002-12-28 10:57:00 Have had 3 worm infections over past couple of weeks. All happened when another person was using my machine.
Couple of DATOM and one QAZ which I think are related.
Have had some trouble in determining just where they came from. Have asked user to use AVG after each session and record websites she visited, and any email attachments opened, but no luck so far.
Is there any other, or better, way of tracking down which websites/attachments these things come from?
Regarding observed effects, they have been different in each case.
One sabotaged Notepad, the next sabotaged a photo edit prgram (MGI Photosuite) and the third sabotaged (it seems) a video driver.
Obvious action of at least the DATOM was to include a line "run MSVXD.EXE" in my win.ini, and it seems the MSVXD was doing the above sabotage.
I have apparently sorted out the obvious effects OK - but any thoughts ...??
rugila (214)
109522 2002-12-29 09:11:00 Are you sure your machine is adequatly secured? Eg do you have file and print sharing enabled on the internet adapter and that user has a blank password? BIFF (1)
1