Is there a way to find the website a virus was downloaded from?

[DustSailor]

For any malware, spyware, virus, trojan, etc, is it possible to find the website is was downloaded from? I know you can find the location it was downloaded to on your computer using most ecurity software, but I would like to know a website's name so I could potentially block it or take precautions to avoid it.

Would this be possible, and if so, what would be required?

Thank you anyone for your help.

 

[richc46]

It may be difficult to find out where a past virus is from, but you can test websites and individual folders, for future use, to test if there are potential problems.
If you have a list of recent site visits, which may have given you a virus, you can test each
https://www.virustotal.com/

 

[wanchoo]

I think that between Avast! Free A-V and Comodo Free Firewall, potentially infected sites are blocked on my computer. In fact it sometimes becomes annoying.

I wonder what A-V and Firewall you use and are they unable to block potentially infected web-sites?

 

[richc46]

I have been using Security Essentials and the Windows Firewall. For about a week I have been experimenting with the free Avast. I think it has the best protection from infected websites.
A little bit more than half the reviews favor Avast over Security Essentials, but its basically even.

 

[DustSailor]

Avast is supposed to be better, but I do have MSE installed and Windows firewall w/ router. This particular computer is supposed to be lightweight so I don't install too much security features on it. My other computer I use for banking, work, etc. so I've added Malwarebytes to the mix along with sandboxie.

Anyway, I do have a list of recent website visits, but I didn't think they were any bad. The malware may have been downloaded a little bit ago, so I may have to go through more websites. I'll get back to you to let you all know how the virustool scan goes (nice find btw)

 

[UsernameIssues]

You could add OpenDNS into the mix, but I've had to clean up more than one Fake AV infection where MSE, Malwarebyes and OpenDNS were all involved... mostly from people attempting to find clip art to add to some presentation.

Given the amount and type of crap that these Fake AV infections change in the registry, I have to say that MSE's heuristic scanning is lacking.

 

[DustSailor]

Yea, I didn't find anything with virusscan. hmm. How well does open-dns perform? The fact it asks for personal info makes me uncomfortable.

 

[UsernameIssues]

You can use OpenDNS on two levels:

1) just use their DNS servers (have your router pass their DNS IPs out)

2) add a free account to that so that you can list any additional sites that you don't want people to visit.

Are they asking for (or gathering?) personal info if you just do the first level?

 

[DustSailor]

I think so. Tried it out and it seemed to request home address, name, etc. but the idea is good. Maybe I can figure it out later (I'm on a different computer right now, away from home). I do not care much for the second level, as I can just program my router to block sites if I need to. I'll give it a try when I get home.

 

[UsernameIssues]

To use OpenDNS at the first level - all you need to know is that the OpenDNS nameservers are 208.67.222.222 and 208.67.220.220. Either feed those to your router and let the router feed them to each computer - or put them into one computer as a test.

 

[Jacee]

. sorry no post

 

[windude99]

We use Open DNS at my house and it's great! It supposedly speeds up the internet connection, but I have no way to test that.

 

[UsernameIssues]

....but I have no way to test that.

How do I test DNS lookup latency with ns_bench? SBC DSL FAQ | DSLReports.com, ISP Information