Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

2
votes
1answer
90 views

Effectiveness of Secure Boot on kernel-mode rootkit detection

With so many new patches and updates, how effect is Secure Boot on detecting kernel-mode rootkits?
0
votes
2answers
195 views

Difference between antivirus and sandbox?

When reading about how antivirus and sandbox work, my understanding is that an AV scans a file to see whether it matches with known viruses signatures. Sandbox can be used to obtain the behaviors of a ...
10
votes
0answers
76 views

Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report [closed]

Tavis Ormandy of Google has recently discovered a critical TrendMicro design flaw identified in this bug report - TrendMicro node.js HTTP server listening on localhost can execute commands. The bug ...
7
votes
1answer
633 views

Is rooting an Android phone to install an anti-virus firewall worth it?

Some Android anti-virus offer a firewall like Avast or Comodo anti-virus but you need to have a root access to use them. However rooting an Adroid phone is often presented as a security risk. So: ...
4
votes
1answer
207 views

Antivirus constantly detecting tmp files as threats

Recently my antivirus has been constantly detecting threats and it's always tmp files. I delete maybe 50 of these files each day. A few days ago it detected a trojan. Last week it detected many ...
4
votes
2answers
368 views

What is the difference between a HIDS/HIPS and an anti virus?

I have gone through what IDS/IPS's are. I understand the difference between a NIDS/NIPS and a HIDS/HIPS. But Host IDS and Host IPS sound like an antivirus software to me, is there a difference?
0
votes
1answer
64 views

Is it a good idea to use two antivirus? [duplicate]

I read a "no two anti-virus" rule and I also read about how you can use two anti-virus programs, but you need to do some configuration. Is it worth it to run two anti-virus programs on one system and ...
66
votes
6answers
37k views

Should I get an antivirus for Ubuntu?

Considering the recent thread regarding anti-virus for the Mac I wonder how many of the arguments put forth are relevant today to Linux systems, specifically Ubuntu. There are no known Ubuntu ...
2
votes
1answer
156 views

Using multiple AV's

As my computer is currently set up, I have 3 AV's: AVG (paid), Malwarebytes, and Spybot S&D. I think that each one of these serves a purpose: AVG gets your real malware - Trojans, Worms, etc. and ...
-5
votes
1answer
47 views

Does AV Search Machine Code or Source?

When scanning a downloaded file, does AV search the malicious source code or assembly code to identify malicious code? Are there any online resources that give detailed analysis of how AV scans ...
5
votes
1answer
100 views

How Can Malware Hide Using Cryptography

How is it possible for malicious programs to hide using polymorphic cryptography when programs must be first compiled into machine code? You cannot cryptographically hide machine code, can you? Then ...
3
votes
3answers
112 views

Detect trojan/keylogger/virus on a businees network

On a business computer network with around 50 computers, there is a computer infected. We need to find that and remove it. I have been running the software below in the suspicious computers, but ...
0
votes
3answers
94 views

How to successfully prevent advance persistent threats

With the topic of advance persistent threats (APT) getting common nowadays, how do you successfully prevent such an attack in the workplace? Do you have to purchase expensive tools, such as those from ...
1
vote
2answers
250 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
3
votes
1answer
121 views

Memory Mapped Files and AV

Do you know if AVs scans non-persistent memory mapped file content in a Windows Environment ? (Or have the answers for some of the AV on the market) I would prefer, if possible, some real world ...
27
votes
4answers
2k views

Are anti-virus companies companies regularly committing software piracy?

As Mikko Hypponen highlighted in a recent tweet, anti-Virus companies collect and store both samples of malicious software and samples of legitimate software: This got me to thinking, what ...
2
votes
1answer
111 views

Linux antivirus and files bigger then 4GB

I wish to scan files that are bigger then 4GB. For example video files. I noticed many antivirus software are limited to a maximum of 4GB (ClamAV for example). So: Is there a antivirus software ...
27
votes
4answers
14k views

Is HTML5 vibrate feature a security vulnerability?

While surfing a news website on my mobile, I receive a virus infection alert warning that triggers my phone to vibrate incessantly. The alert looks like the following: I didn't expect my phone to ...
0
votes
1answer
56 views

If my antivirus caught suspicious .exe files transferring from a mac to my PC, am I safe from them?

I've been trying to help my mother in law to backup / upgrade her old Mac. In order to use online backup solutions, I've had to transfer her files to my Windows PC. As files were transferring, I saw a ...
3
votes
3answers
746 views

Should anti-virus detect metasploit payloads?

As part of a workstation pen test, I copy a simple metasploit payload onto the workstation, and try to run it. Usually this is blocked by anti-virus software. However, sometimes it isn't (I won't name ...
2
votes
3answers
79 views

Is there a more precise approach to generate signatures for ClamAV, than regex signatures?

Actually I generate signatures from libraries, to scan executables for beeing statically linked to that library. My actual approach is to read out the .text section and generate a byte sequence for ...
1
vote
1answer
65 views

Access to email without antivirus [duplicate]

I am doing a test where we want to asses whether an email with a benign virus in it, exits a network. I need a means to receive the test emails I am sending from inside the network, without any ...
4
votes
1answer
593 views

Does anti-virus/security software protect against NTFS ADS?

I know that NTFS has features called ADS which may be used to hide malware. So does antivirus/security software, such as Norton 360, protect against this type of attack?
1
vote
1answer
533 views

ClamAV Flagging application .swf files as malware

ClamAV scans on our application servers are identifying some of our legitimate Flex .swf files as malicious, specifically citing CVE-2015-5548 (specifically, "Swf.Exploit.CVE_2015_5548 FOUND"). ...
6
votes
8answers
257 views

Difference between virus and trojan?

To my current understanding: a virus is a program that does not self replicate and relies on the host file being spread, it has malicious intent. A trojan is a program that is run be deceiving the ...
3
votes
0answers
51 views

“Segmented” malware

I've been researching how anti-malware tools function and I feel like I'm missing something with heuristic analysis. What I've learned so far Anti-malware programs can use heuristic analysis and ...
1
vote
2answers
204 views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
2
votes
3answers
93 views

Wordpress: a Virus detection plugin is necessary?

Is a Virus detection plugin is necessary for WordPress nowadays? EDIT: I mean to prevent attacks and violations... for example i'm using this plugin: ...
4
votes
3answers
161 views

Best way to check if your browser is secure

There is a lot of Malware checking software which seems is just a virus. How can you check for sure that your Windows 8 computer is uninfected with virus and malware? Is malwarebytes enough, or ...
3
votes
2answers
309 views

Why Antivirus Detects Simple Java Program as Trojan?

Just now I was testing a very simple code in java when I noticed a strange thing.......... On Compiling the program My antivirus detected it as trojan and deleted the jar file....... Further it is not ...
9
votes
3answers
5k views

How to pass PCI DSS 2.0 anti-virus requirement (5.1) on Linux?

PCI DSS 2.0 Requirement 5.1 states: 5.1 Deploy anti-virus software on all systems commonly affected by malicious software (particularly personal computers and servers). This requirement ...
-4
votes
1answer
102 views

Will Kaspersky or BitDefender work on Hyper-V? [closed]

In case if I decide to test them or just don't want install them on a physical machine. I mean usual versions of antiviruses, not specially designed for virtual machines. Also interesting if I can ...
15
votes
4answers
11k views

Does a webserver need an antivirus software installed?

In what cases does a webserver need an antivirus software installed? When it is not required? If it is required sometimes, what should be considered when choosing the right one to install? (In my ...
8
votes
4answers
202 views

Does it matter which platform a file is scanned on for malware?

Different operating systems use different file types and file systems. Does it make a difference to a virus scan which system it is being run on and what type of malware it's looking for? I ask ...
16
votes
4answers
2k views

How is a worm different from a virus?

In spite of various online articles, I'm a bit unclear on the distinction between a "worm" and a "virus". Two related questions-- Is there a useful and clear distinction here or no? If so, what is ...
-1
votes
3answers
416 views

What kind of software can be used to remove Rootkit.Sirefef.Gen? [closed]

My System has the rootkit Rootkit.Sirefef.Gen. I would like to know how I can remove this rootkit.
8
votes
4answers
10k views

Are there faux/fake malicious websites to test web reputation services similar to EICAR?

Antivirus writers have agreed for their software to recognize a standard "fake" virus file - the EICAR file, to let users check, that the software is up and running. Are there any equivalent test ...
5
votes
5answers
368 views

Could antivirus programs not just scan all files upon creation?

Could antivirus programs not just scan all files as they are created instead of using on access scanning. Would this kind of approach not be much more scure?
-2
votes
11answers
5k views

Do we really need an antivirus? if yes, what for? And how do they activate and enter in a PC?

I've been reading on various sites how PC get infected by viruses and I got: Email attachments (but of course, only if I get an exe and open or execute something, right?) Don't update windows ...
41
votes
5answers
11k views

Accidentally came across the source code for some malware, what to do?

I accidentally, the other day, went to a dodgy site, and today I discovered that in my cache there lay a text file. And after reading the contents of the file, I have deduced that it is the source ...
5
votes
2answers
343 views

What's the attitude of anti-virus vendors toward ransomware?

I was recently asked to look at a Windows computer behaving strangely, and I found a "Your files have been encrypted" ransom note that had been left in several directories. I wasn't able to identify ...
2
votes
1answer
110 views

How long does it typically take to distribute malware signatures?

Are there industry-wide measures that identify how long it typically takes to identify, develop and distribute new malware signatures? I want to understand how long organizations are typically ...
1
vote
3answers
162 views

Gaming Mods Security Risks

I read the following post, and while the questions was specific to SkyRim, the more general answer was that it depends on the game. I wanted to pose a more generic question here to the security folks. ...
5
votes
2answers
186 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
108
votes
8answers
15k views

Are there technical differences which make Linux less vulnerable to virus than Windows?

What makes Linux so different than Windows in terms of anti-virus needs? My question is not if I should get an anti-virus for my Linux. I perfectly understand why an AV is important. I would like ...
1
vote
1answer
101 views

what is the most secure hash for virus definition databases in 2015?

I have been told, if I wanted to create virus signatures from infected files to use for detection in the future, I should be careful as some of them are prone to collision attacks?
2
votes
2answers
82 views

Is it possible to safely watch a specific folder with virus scan on Windows Server?

I have a website that must allow numerous file types to be uploaded, some of which could possibly be dangerous, such as a word document. There's only a single website on this server that allows this. ...
2
votes
0answers
1k views

How to disable injection JavaScript into browsers? [closed]

I am using Kaspersky Antivirus and recently I've updated it to Kaspersky Total Security 16.0.0.614. When I checked my browsers I realized Kaspersky injects remote JavaScript into all my pages even ...
5
votes
1answer
141 views

Kaspersky Lab malware faking. How worried should I be? [closed]

Well most probably we will never know the truth, but anyway: Beginning more than a decade ago, one of the largest security companies in the world, Moscow-based Kaspersky Lab, tried to damage ...
4
votes
9answers
1k views

I only use windows for games. Do I need anti virus protection?

I use Linux, and even though I'm not pretending my system is virus-free, it's generally accepted that even an aggressive firewall is not a requirement. I want to install Windows 7 on a machine which ...