Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

-4
votes
0answers
20 views

Does Anti-Virus engine scans uncategorised web sites? [on hold]

Does Anti-Virus engine scans uncategorised web sites ?
-5
votes
1answer
76 views

Avira Antivirus acting as a virus [on hold]

I have a Avira Antivirus installed on Windows 7. The problem is now when I click on any button or click to uninstall any program it redirects me to the Avira website where it says upgrade it for more ...
1
vote
2answers
59 views

If I can disable antivirus tamper protection, couldn't a malicious worm do it as well?

I was wondering how those client softwares protect themselves from worms / malwares etc. Symantec protects their files from malicious users / admins with the tamper protection mechanism, but sometimes ...
4
votes
0answers
40 views

Detecting Process Hollowing

I was brainstorming methods of detecting process hollowing and other forms of code injection, and this one seemed pretty robust. Would it be possible for a "process hollowing scanner" to enumerate ...
3
votes
3answers
134 views

Methods for determining if a file is encypted?

I am working on a anti-ransomware project. It simply monitors the filesystem, and watches for files being created, and deleted. (also monitors for known ransomware file extensions.) Basic Operation: ...
0
votes
2answers
157 views

How can you be sure that there is a virus on your computer?

Am I being paranoid? I'm seeing signs of a virus everywhere on my computers but I have no way of being sure. I've tried scanning with Windows Defender multiple times but haven't found anything. My ...
0
votes
1answer
63 views

Avast attempts to connect to the Internet when I try to download email [closed]

The file AVAST (Software\Avast\AvastSvc.exe) tries to connect when I check my email. When I forbid access to the internet for AvastSvc.exe, I can't connect to POP3 & SMTP. I'm not sure where all ...
2
votes
1answer
29 views

Server loaded with antivirus lets viral file go through

We have a .NET MVC website with a WCF Service as a service layer. One of the feature that the service offers is the ability to upload documents. When we asked our security consultant to test our ...
9
votes
1answer
377 views

Are keyboard hooks inherently malicious?

My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE). ...
1
vote
1answer
43 views

May I install more than one anti ransomware on the same pc?

I installed Bitdefender anti ransomware free tool, but as I read: It is only good against CryptoWall and CTB-Locker. So I'd like to install some others, but I wonder: Is it recommendable to ...
0
votes
2answers
74 views

Mac OS X vulnerabilities and not having the need for an antivirus?

I have just read news about Mac OS X vulnerabilities and wondered why would people say that you don't need an antivirus if you are using a Mac? There are vulnerabilities in other operating systems ...
0
votes
2answers
112 views

The best way to prevent ransomware and virus? [closed]

I am using Avast free antivirus real time protection and weekly scan Malwarebytes free anti malware weekly scan Malwarebytes Anti-ransomware EMET good enough? Anything else I should do or choose ...
36
votes
4answers
4k views

Avast AV could read Firefox saved passwords

My friend uses Firefox's built-in password manager feature to save passwords for sites. Later, after installing Avast Free Antivirus there was a feature called Passwords on the Avast UI. When accessed ...
1
vote
2answers
41 views

What are the technical implmentation differences between signature based scanning and heuristic based scanning?

Signature based scanning works by comparing something to a database. So does this basically amount to scanning file x for string "foobar" ? I know heuristic based scanning can detect new threats that ...
13
votes
4answers
4k views

Can I block viruses from a USB stick by scanning it before opening its folder?

I inserted my USB stick into a friend's PC which was full of viruses, malwares and adwares. Therefore I suppose they attacked my USB device as well. Now I want to use my USB device on my PC without ...
2
votes
1answer
67 views

What is quarantine

What antiviruses actually do when quarantining a malicious threat does it compress the file using some algorithm or just change the extension of the file or just move the file to a safer location
1
vote
2answers
70 views

VirusTotal desktop file uploader seems infected

I wanted to scan my process with VirusTotal.com and for this I downloaded vtuploader2.2.exe from their website. Before executing, I uploaded it to VirusTotal.com and scanned it for viruses to make ...
2
votes
1answer
80 views

What are the security implications of autorun and external drives?

I have some questions about the security implications of accessing internal and external storage since I cant find any more information on it from what I've read. I have read about a variety of ...
-4
votes
1answer
23 views

What security measures to be considered [closed]

First, I know kali Linux is not suitable for day to day work. Since I am using Windows PC with low ram so I didn't prefer installing it on a virtual machine. I have totally uninstalled my windows (I ...
0
votes
2answers
55 views

Protection against file distributed malware

Let's say I have one server called A which host an upload website which is connected at the network connection B. Let's say one of my clients uploads multiple .rar files of 1 MB (that contains malware ...
1
vote
1answer
46 views

Best appraoch to test inhouse firewall effectiveness

We have Fortigate 100D that has antivirus profiles enabled like SMPT, POP3 and IMAP. How one could make sure that the antivirus is working as expected ? For instance it seems that Fortigate has ...
1
vote
2answers
65 views

If signature based AV software is becoming obsolete, what is the home user to do?

Assuming one is a worried home user who keeps certain sensitive files, works on personal projects, and generally wants to ensure the integrity of their single system (to keep it simple), what's a user ...
4
votes
1answer
67 views

Thorough computer scan

I'd like to give my computer an overall deep scan against all kinds of malware. I was infected about a year ago and I feel like there may still be some hidden rootkit on my HDD or something like ...
78
votes
2answers
16k views

I'm a White Hat and I develop my own viruses. Should I report it when almost all scanners say the executable is safe?

I develop my own viruses for 'scientific' purposes, namely to see if they pass the test of Virustotal.com. They all do, except for one or two scanners. Is this considered something you should report ...
1
vote
2answers
117 views

How can someone know technically if antivirus provider tracks him? [closed]

Is there a technical way to make sure that your antivirus provider doesn't send any information from your computer? Is there a reliable list of antivirus providers that this issue was checked and it ...
0
votes
1answer
40 views

How Do AVs differentiate between normal cryptographic modules and viruses crypters

I have read that some viruses -in order to avoid AVs- use crypters to encrypt their code so that the AV can't detect them. so as a countermeasure, AVs are programmed to look for the crypter -in the ...
4
votes
1answer
73 views

Is there a name for an anti-virus station / kiosk?

I am not able to define the exact term for a station that is meant to scan whatever media coming from outside a company and that have the following specifications: The station should never be on any ...
2
votes
2answers
62 views

Why should anti-virus software scan on a file read?

I got a brand new PC today because I couldn't Bootcamp my Mac due to a shortage of disk space on its SSD. It had McAfee pre-installed on it, and, shortly afterward, I noticed a ton of performance ...
0
votes
2answers
158 views

What Is “Kaspersky Security Center Network Agent”?

I see this in the program list on my office laptop. I believe it is the antivirus software installed by the official networking staff but I don't see where it is in my windows. I never see any updates ...
0
votes
2answers
69 views

Antivirus connects to their server over port 80

I ran a netstat and noticed that my computer has an always-established connection with my anti-virus (Avast) over port 80. I haven't gone as far as to parse through it in Wireshark, so I can only ...
0
votes
1answer
85 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
2
votes
1answer
35 views

Moving Infected Files to Trash versus Quarantining them

When you run an AntiVirus, typically they give you the option of quarantining the infected files. I remember when I was a kid I would move them to the trash bin instead. My question is, which method - ...
0
votes
1answer
80 views

How would I prove a windows executable is not a false positive? [closed]

I am could looking looking at method that involves decompilation or hex editing but I am hoping something simpler is available, although fully willing to go down that path. The scenario I am trying ...
0
votes
1answer
77 views

Virus: Images get replaced on website [closed]

I have installed Windows 7 again on my laptop with Chrome as browser. The problem is that on different websites I visit, the actual images of the website get replaced with out of context images. It ...
4
votes
3answers
118 views

Are virus signatures different between antiviruses?

Are virus signatures different between antiviruses? For example, can a virus signature in Kaspersky differ from the signature associated to the same virus in Avast?
2
votes
1answer
105 views

Can I trust my antivirus' assessment of my computer as clean, if it previously found threats?

Yesterday, I went to my Recycle Bin (for the first time in a while) to purge a bunch of files I had sent there. When I clicked on the folder, my antivirus warned me of a trojan out of the blue. Later, ...
0
votes
2answers
210 views

Difference between antivirus and sandbox?

When reading about how antivirus and sandbox work, my understanding is that an AV scans a file to see whether it matches with known viruses signatures. Sandbox can be used to obtain the behaviors of a ...
10
votes
0answers
76 views

Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report [closed]

Tavis Ormandy of Google has recently discovered a critical TrendMicro design flaw identified in this bug report - TrendMicro node.js HTTP server listening on localhost can execute commands. The bug ...
7
votes
1answer
705 views

Is rooting an Android phone to install an anti-virus firewall worth it?

Some Android anti-virus offer a firewall like Avast or Comodo anti-virus but you need to have a root access to use them. However rooting an Adroid phone is often presented as a security risk. So: ...
4
votes
2answers
385 views

What is the difference between a HIDS/HIPS and an anti virus?

I have gone through what IDS/IPS's are. I understand the difference between a NIDS/NIPS and a HIDS/HIPS. But Host IDS and Host IPS sound like an antivirus software to me, is there a difference?
0
votes
1answer
64 views

Is it a good idea to use two antivirus? [duplicate]

I read a "no two anti-virus" rule and I also read about how you can use two anti-virus programs, but you need to do some configuration. Is it worth it to run two anti-virus programs on one system and ...
4
votes
1answer
225 views

Antivirus constantly detecting tmp files as threats

Recently my antivirus has been constantly detecting threats and it's always tmp files. I delete maybe 50 of these files each day. A few days ago it detected a trojan. Last week it detected many ...
-5
votes
1answer
48 views

Does AV Search Machine Code or Source?

When scanning a downloaded file, does AV search the malicious source code or assembly code to identify malicious code? Are there any online resources that give detailed analysis of how AV scans ...
5
votes
1answer
101 views

How Can Malware Hide Using Cryptography

How is it possible for malicious programs to hide using polymorphic cryptography when programs must be first compiled into machine code? You cannot cryptographically hide machine code, can you? Then ...
3
votes
3answers
112 views

Detect trojan/keylogger/virus on a businees network

On a business computer network with around 50 computers, there is a computer infected. We need to find that and remove it. I have been running the software below in the suspicious computers, but ...
0
votes
3answers
94 views

How to successfully prevent advance persistent threats

With the topic of advance persistent threats (APT) getting common nowadays, how do you successfully prevent such an attack in the workplace? Do you have to purchase expensive tools, such as those from ...
0
votes
2answers
260 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
7
votes
2answers
531 views

Where Does ClamAV Get Its Virus Signatures?

I see that ClamAV has virus definition files which are mostly hash codes in md5, sha1, and sha256 formats, which either look at the whole file or what are called PE sections of an executable file. Of ...
2
votes
1answer
112 views

Linux antivirus and files bigger then 4GB

I wish to scan files that are bigger then 4GB. For example video files. I noticed many antivirus software are limited to a maximum of 4GB (ClamAV for example). So: Is there a antivirus software ...
22
votes
3answers
4k views

Metasploit Meterpreter alternatives

These days I am testing various type of client hacking techniques, but in all scenarios I am using Meterpreter variations as payload. Now I can bypass Anti-Virus and Firewalls easily, but Symantec ...