Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

0
votes
2answers
37 views

Antivirus connects to their server over port 80

I ran a netstat and noticed that my computer has an always-established connection with my anti-virus (Avast) over port 80. I haven't gone as far as to parse through it in Wireshark, so I can only ...
0
votes
0answers
10 views

Are there any scareware that install an actual antivirus? [on hold]

I got to thinking about this after reading a bit about scareware, and I thought, could there be a malware example out there that installs a free version of, say, superantispyware or something, but ...
0
votes
1answer
54 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
0
votes
0answers
41 views

How does antivirus software fight polymorphic viruses [closed]

Antivirus relies on comparing hashes. It is trivially easy for a virus to change its hash every time it reaches a new host. So I assume there must be ways for antivirus software to fight this. What ...
2
votes
1answer
26 views

Moving Infected Files to Trash versus Quarantining them

When you run an AntiVirus, typically they give you the option of quarantining the infected files. I remember when I was a kid I would move them to the trash bin instead. My question is, which method - ...
-2
votes
0answers
26 views

How does MBAM run so quickly on Mac computer

How does the MBAM antimalware scanner for Mac OS devices run so quickly? I used it on a computer and it finished literally within two seconds; it was so fast that I thought for a second that I had ...
0
votes
1answer
38 views

How would I prove a windows executable is not a false positive? [closed]

I am could looking looking at method that involves decompilation or hex editing but I am hoping something simpler is available, although fully willing to go down that path. The scenario I am trying ...
-5
votes
1answer
69 views

What to do if meterpreter get Caught? [closed]

Well we all have veil and its great really great But, When i run the payload the AV found that meterpreter is running from memory And then my payload is useless. How can i bypass that ? I tried ...
0
votes
1answer
50 views

Virus: Images get replaced on website [closed]

I have installed Windows 7 again on my laptop with Chrome as browser. The problem is that on different websites I visit, the actual images of the website get replaced with out of context images. It ...
3
votes
3answers
90 views

Are virus signatures different between antiviruses?

Are virus signatures different between antiviruses? For example, can a virus signature in Kaspersky differ from the signature associated to the same virus in Avast?
0
votes
0answers
35 views

Can I trust my antivirus' assessment of my computer as clean, if it previously found threats?

Yesterday, I went to my Recycle Bin (for the first time in a while) to purge a bunch of files I had sent there. When I clicked on the folder, my antivirus warned me of a trojan out of the blue. Later, ...
0
votes
2answers
70 views

Difference between antivirus and sandbox?

When reading about how antivirus and sandbox work, my understanding is that an AV scans a file to see whether it matches with known viruses signatures. Sandbox can be used to obtain the behaviors of a ...
10
votes
0answers
73 views

Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report [closed]

Tavis Ormandy of Google has recently discovered a critical TrendMicro design flaw identified in this bug report - TrendMicro node.js HTTP server listening on localhost can execute commands. The bug ...
6
votes
1answer
161 views

Is rooting an Android phone to install an anti-virus firewall worth it?

Some Android anti-virus offer a firewall like Avast or Comodo anti-virus but you need to have a root access to use them. However rooting an Adroid phone is often presented as a security risk. So: ...
4
votes
2answers
80 views

What is the difference between a HIDS/HIPS and an anti virus?

I have gone through what IDS/IPS's are. I understand the difference between a NIDS/NIPS and a HIDS/HIPS. But Host IDS and Host IPS sound like an antivirus software to me, is there a difference?
0
votes
1answer
46 views

Is it a good idea to use two antivirus? [duplicate]

I read a "no two anti-virus" rule and I also read about how you can use two anti-virus programs, but you need to do some configuration. Is it worth it to run two anti-virus programs on one system and ...
4
votes
1answer
71 views

Antivirus constantly detecting tmp files as threats

Recently my antivirus has been constantly detecting threats and it's always tmp files. I delete maybe 50 of these files each day. A few days ago it detected a trojan. Last week it detected many ...
-5
votes
1answer
40 views

Does AV Search Machine Code or Source?

When scanning a downloaded file, does AV search the malicious source code or assembly code to identify malicious code? Are there any online resources that give detailed analysis of how AV scans ...
5
votes
1answer
73 views

How Can Malware Hide Using Cryptography

How is it possible for malicious programs to hide using polymorphic cryptography when programs must be first compiled into machine code? You cannot cryptographically hide machine code, can you? Then ...
3
votes
3answers
101 views

Detect trojan/keylogger/virus on a businees network

On a business computer network with around 50 computers, there is a computer infected. We need to find that and remove it. I have been running the software below in the suspicious computers, but ...
0
votes
3answers
88 views

How to successfully prevent advance persistent threats

With the topic of advance persistent threats (APT) getting common nowadays, how do you successfully prevent such an attack in the workplace? Do you have to purchase expensive tools, such as those from ...
1
vote
2answers
102 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
7
votes
2answers
158 views

Where Does ClamAV Get Its Virus Signatures?

I see that ClamAV has virus definition files which are mostly hash codes in md5, sha1, and sha256 formats, which either look at the whole file or what are called PE sections of an executable file. Of ...
2
votes
1answer
78 views

Linux antivirus and files bigger then 4GB

I wish to scan files that are bigger then 4GB. For example video files. I noticed many antivirus software are limited to a maximum of 4GB (ClamAV for example). So: Is there a antivirus software ...
22
votes
3answers
3k views

Metasploit Meterpreter alternatives

These days I am testing various type of client hacking techniques, but in all scenarios I am using Meterpreter variations as payload. Now I can bypass Anti-Virus and Firewalls easily, but Symantec ...
0
votes
1answer
50 views

If my antivirus caught suspicious .exe files transferring from a mac to my PC, am I safe from them?

I've been trying to help my mother in law to backup / upgrade her old Mac. In order to use online backup solutions, I've had to transfer her files to my Windows PC. As files were transferring, I saw a ...
2
votes
3answers
60 views

Is there a more precise approach to generate signatures for ClamAV, than regex signatures?

Actually I generate signatures from libraries, to scan executables for beeing statically linked to that library. My actual approach is to read out the .text section and generate a byte sequence for ...
1
vote
1answer
61 views

Access to email without antivirus [duplicate]

I am doing a test where we want to asses whether an email with a benign virus in it, exits a network. I need a means to receive the test emails I am sending from inside the network, without any ...
1
vote
1answer
476 views

ClamAV Flagging application .swf files as malware

ClamAV scans on our application servers are identifying some of our legitimate Flex .swf files as malicious, specifically citing CVE-2015-5548 (specifically, "Swf.Exploit.CVE_2015_5548 FOUND"). ...
3
votes
0answers
38 views

“Segmented” malware

I've been researching how anti-malware tools function and I feel like I'm missing something with heuristic analysis. What I've learned so far Anti-malware programs can use heuristic analysis and ...
1
vote
2answers
183 views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
1
vote
3answers
90 views

Wordpress: a Virus detection plugin is necessary?

Is a Virus detection plugin is necessary for WordPress nowadays? EDIT: I mean to prevent attacks and violations... for example i'm using this plugin: ...
4
votes
3answers
129 views

Best way to check if your browser is secure

There is a lot of Malware checking software which seems is just a virus. How can you check for sure that your Windows 8 computer is uninfected with virus and malware? Is malwarebytes enough, or ...
2
votes
1answer
60 views

Effectiveness of Secure Boot on kernel-mode rootkit detection

With so many new patches and updates, how effect is Secure Boot on detecting kernel-mode rootkits?
3
votes
2answers
209 views

Why Antivirus Detects Simple Java Program as Trojan?

Just now I was testing a very simple code in java when I noticed a strange thing.......... On Compiling the program My antivirus detected it as trojan and deleted the jar file....... Further it is not ...
-4
votes
1answer
80 views

Will Kaspersky or BitDefender work on Hyper-V? [closed]

In case if I decide to test them or just don't want install them on a physical machine. I mean usual versions of antiviruses, not specially designed for virtual machines. Also interesting if I can ...
41
votes
5answers
11k views

Accidentally came across the source code for some malware, what to do?

I accidentally, the other day, went to a dodgy site, and today I discovered that in my cache there lay a text file. And after reading the contents of the file, I have deduced that it is the source ...
1
vote
1answer
108 views

Antivirus monitoring activity: why do they not have an internal firewall to prevent processes' access to user's documents?

A question that arises after an updated and licensed version of Norton Internet Security has detected a trojan installed in my new laptop (Win7 installed on 26 Aug'15 and fully updated). Trojan ...
0
votes
1answer
92 views

what is the most secure hash for virus definition databases in 2015?

I have been told, if I wanted to create virus signatures from infected files to use for detection in the future, I should be careful as some of them are prone to collision attacks?
6
votes
8answers
207 views

Difference between virus and trojan?

To my current understanding: a virus is a program that does not self replicate and relies on the host file being spread, it has malicious intent. A trojan is a program that is run be deceiving the ...
1
vote
2answers
73 views

Is it possible to safely watch a specific folder with virus scan on Windows Server?

I have a website that must allow numerous file types to be uploaded, some of which could possibly be dangerous, such as a word document. There's only a single website on this server that allows this. ...
2
votes
0answers
1k views

How to disable injection JavaScript into browsers? [closed]

I am using Kaspersky Antivirus and recently I've updated it to Kaspersky Total Security 16.0.0.614. When I checked my browsers I realized Kaspersky injects remote JavaScript into all my pages even ...
4
votes
1answer
127 views

Kaspersky Lab malware faking. How worried should I be? [closed]

Well most probably we will never know the truth, but anyway: Beginning more than a decade ago, one of the largest security companies in the world, Moscow-based Kaspersky Lab, tried to damage ...
4
votes
2answers
201 views

What's the attitude of anti-virus vendors toward ransomware?

I was recently asked to look at a Windows computer behaving strangely, and I found a "Your files have been encrypted" ransom note that had been left in several directories. I wasn't able to identify ...
105
votes
8answers
15k views

Are there technical differences which make Linux less vulnerable to virus than Windows?

What makes Linux so different than Windows in terms of anti-virus needs? My question is not if I should get an anti-virus for my Linux. I perfectly understand why an AV is important. I would like ...
27
votes
4answers
8k views

Is HTML5 vibrate feature a security vulnerability?

While surfing a news website on my mobile, I receive a virus infection alert warning that triggers my phone to vibrate incessantly. The alert looks like the following: I didn't expect my phone to ...
-1
votes
1answer
167 views

A sneaky way of disabling Microsoft Security Essentials?

For a long time I've been dismissing and ignoring this popup, which is easy since it only appears at boot (or logon) which is once every few months: But recently I became suspicious after a crash ...
23
votes
3answers
3k views

Could malware move during a scan to avoid detection?

I think every AV-Scanner is using some predictable recursive scan to search files for malware. Couldn't malware easily detect a scan and just move to an already checked location, determined by knowing ...
3
votes
3answers
709 views

What is the precise difference between a signature based vs behavior based antivirus?

I do not understand very well the difference between signature based vs behavior based antiviruses. Please clarify the distinction between the two.
6
votes
2answers
174 views

SSL Handshake failure when antivirus is enabled

This is a problem related to SSL handshake failures when an anti-virus (Kaspersky) is in between. From WireShark, I am able to notice the SSL handshake successful (i.e towards the end client ...