Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

6
votes
5answers
8k views

Is it worth it to get paid anti-virus software?

With the rise in cybercrime, I am slightly worried about my computer security. I have been using open sourced anti-virus AVG for years and it has been doing well. Are anti-virus software like Norton ...
1
vote
0answers
91 views

HTTP GET Request to a webpage that does not exist [closed]

I am seeing a machine is making a HTTP GET request to webpage (ex: www.sample.com/1.png), proxy devices respond with status code 407 (proxy auth required). But when I checked for the site via ...
1
vote
1answer
98 views

Has this method ever been used by viruses to check if system has already been infected?

I know the era of the self spreading worm is over, but has this mechanism for determining if a machine has already been infected or not ever been used? When a virus runs it checks to see if the ...
6
votes
4answers
6k views

Are there faux/fake malicious websites to test web reputation services similar to EICAR?

Antivirus writers have agreed for their software to recognize a standard "fake" virus file - the EICAR file, to let users check, that the software is up and running. Are there any equivalent test ...
4
votes
6answers
3k views

Why do some antivirus programs find infections that others miss?

I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up. In scanning my system with ...
5
votes
2answers
4k views

Avast https scanning

How does Avast's https scanning feature work? Is it basically a MITM attack? This feature was enabled in the 2015 version released a few days back
6
votes
3answers
2k views

Detected virus in pdf - should I be worried (CVE-2014-8449)?

I downloaded a pdf earlier, and I was trying to send it to my friend, but gmail said that it detected a virus. So I ran it through virustotal.com and only 1 out of 56 scanners came up with a virus - ...
2
votes
1answer
311 views

How is the file overlay read by an exe/virus?

According to what I know ,Overlay is the part of PE file that is not covered by the PE header and therefore isn't part of the virtual image in the Loaded PE. My question is if the overlay is not ...
5
votes
1answer
458 views

How antivirus companies create virus defnitions for new outbreaks

This question quite amazes me. I dont understand how antivirus companies get info about the latest viruses. have they installed some kind of filters to monitor the internet traffic ? Or they are ...
2
votes
1answer
118 views

Will 3rd party antivirus/antimalware programs compromise OSX's built-in security?

There is a very interesting post written by @TechZen. Here's the excerpt from the original post (bold emphasis mine) Should I get an antivirus for my Mac? There's never been a an actual Mac OS X ...
3
votes
6answers
146 views

When is an antivirus program needed/useful?

Let's say I buy a computer and use the internet for services but rarely download anything and when I do it is from legitimate sources with a minimal to non-existent chance of malware. What benefits ...
9
votes
1answer
122 views

Security measures and anti-virus on server to mitigate acting as a propagation vector

We have a web application for which I've been asked to add the ability to let users upload documents that will then be visible and downloadable by other users. Those documents will typically be images ...
8
votes
2answers
164 views

AV detection of signed malware

With the massive Sony leaks (including their private keys/certificate), i was wondering: How do major AVs deal with signed binaries? ie: Does it influence their detecting ability of the signed ...
42
votes
8answers
11k views

Should I get an antivirus for my Mac?

There are some people saying that people should use an antivirus software on Mac. And there are thousands of people claiming that Macs don't get viruses (under this term I mean spyware / malware as ...
9
votes
4answers
8k views

Why Adobe is recommending McAfee security scan during flash player installation?

Why is Adobe recommending a McAfee security scan during the installation of flash player?
1
vote
2answers
101 views

Any “cleaned” virus that's been successfully re-released?

Anti-malware software has to keep track of all bad software there is. To ease this load, it seems like a good idea to stop looking for threats that's been dead for years. Is there any example of some ...
0
votes
1answer
87 views

Is there vulnerabilities that are inherent to the concept of an open source antivirus? [closed]

I read that antivirus opensource software would be a good idea since the database could be informed and mainained by lots of capable people. However I have also read arguments to the contrary but none ...
0
votes
1answer
269 views

What is the difference between YARA and CLAMAV?

Can any one explain the difference between YARA and ClamAV ? Are they just two different ways of writing AV or Malware signatures ?
1
vote
1answer
51 views

What does “hosts-modifier” tag in VirusTotal Intelligence means?

I went through the help pages of VT and VT Intelligence, saw documentation about most tags, but couldn't find anything about the "hosts-modifier" tag, can anyone explain to me what does it mean?
28
votes
10answers
6k views

How to explain to a customer that spamfilters don't catch everything

I used to work in a small office which provided basic desktop support for users. One day I had to answer a call from a very angry customer and he asked for my boss. He wanted to know how could one ...
0
votes
1answer
90 views

PCI Compliance - Antivirus in host and virtual environment?

We have a couple servers with a host system, and virtual DB and Web instances. Is it possible to be compliant with PCI if you install the Antivirus only on the host system, or does it need to be ...
1
vote
2answers
484 views

“Threat: WMA:Wimad [Susp]” on .avi file, possible to remove threat and keep file?

I ran a full system scan this morning with all of my virus/malware programs and Avast detected 1 virus in an .avi file (which thankfully I have not yet watched): Severity: Medium Threat: WMA: Wimad ...
0
votes
0answers
228 views

How can the .rsrc section of a PE used for evil?

I was doing some work with a bootable iso and ClamXav notified me that if found a potential security threat in one of the drivers, nvstor32.sys, located in the iso. I was really curious, so I googled ...
2
votes
4answers
96 views

Do I need antivirus for this unusual installation - or just firewall?

I'm donating an old Windows XP laptop to a school. The machine will spend its golden years doing only one thing - a process that consists of just three steps: Recording lectures and discussions ...
1
vote
2answers
170 views

Help understanding malware infection

I'm kind of a newbie to security and need help fully understanding how I would infect myself inadvertently. Let's say I was to download a .zip file attached to an email and I unzipped the contents. ...
0
votes
2answers
67 views

How do I prove my proxy is scanning for viruses?

I have a proxy server in my DMZ that among other tasks has the role of scanning incoming messages - email, SOAP - for viruses. How do I prove to my team leader that it is performing this role on all ...
0
votes
2answers
352 views

Which Antivirus Software used to remove virus Rootkit.Sirefef.Gen?

My System has affect Rootkit.Sirefef.Gen Virus. So i want to know which antivirus software is used to remove Rootkit.Sirefef.Gen virus file.
12
votes
2answers
3k views

How do anti-virus apps for Android work?

There seems to be a lot of anti-virus apps for Android. On a desktop or server an anti-virus must run with super-user privileges, however I am pretty sure these mobile anti-viruses are running as an ...
0
votes
0answers
301 views

Application Privilege Control in Kaspersky blocks program with no digital signature

I made a small application that displays hello world to the console output and attempted to open it in another computer that had Kaspersky fully updated. When I ran the application, Kaspersky gave a ...
19
votes
1answer
787 views

EICAR Virus Test maliciously used to delete logs?

Today at work I was asked to test our anti-virus software on our Linux servers. I attempted to create a text file containing the EICAR Virus Test signature. The file was deleted instantly, ...
3
votes
1answer
123 views

How exactly are new viruses discovered?

When Evil McJones develops Virus X and initiates its propagation, what events must transpire for AV companies (and AV testing/validation companies) to recognize Virus X? This answer to this question ...
1
vote
2answers
280 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...
3
votes
1answer
1k views

Enterprise Anti-virus for Linux?

I know this question is probably at risk of offending the guidelines but our IaaS provider was unable to offer us an anti-virus solution for our Linux servers. We are deployed in an enterprise cloud ...
1
vote
2answers
544 views

Does the EICAR test work on Linux based antivirus scanners?

Does the EICAR antivirus test work on antivirus scanners for Linux? The EICAR test is described in more detail here: http://en.wikipedia.org/wiki/EICAR_test_file The reason I ask is that it requests ...
1
vote
1answer
1k views

Bitdefender Antivirus SSL Cert substitution

I am using Bitdefender AV 2013 ed and I have noticed that when the Scan SSL is enabled in the configuration BD will use a local certificate, as mentioned here. This modifies the cert chain with BD as ...
2
votes
2answers
906 views

Antivirus settings: delete or quarantine the file?

I understand that most antiviruses by default quarantine infected files. I have changed it to remove all infected files immediately. Would this cause more harm than good?
30
votes
6answers
5k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...
17
votes
8answers
2k views

Are signature based antivirus or antimalware effective?

Are signature based antivirus or antimalware solutions effective? Has the battle been lost against the ever increasing amount of malware, particularly rootkits, that are in the wild?
12
votes
8answers
2k views

Are antiviruses still useful? [duplicate]

Are anti-viruses useful nowadays ? Given the number of viruses that are developed and spread monthly, and given the fact anti-viruses are based on virus signatures, I wonder how much it is useful and ...
0
votes
1answer
41 views

Antivirus false positive

I'm adding new features to an old Borland C++ VCL application using Borland 2006 IDE. I'm finding that upon adding a single line of code, and building, the exe is being quarantined since Sophos is ...
0
votes
1answer
2k views

Does anyone know how Avast File Reputation works?

Whenever I'm programming in C++, after I run a new executable, Avast suspends it informing me that "not much is known" about the file and asking if I'd like to continue execution or terminate the ...
2
votes
0answers
110 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
1
vote
2answers
69 views

Using Free AV to meet PCI Requirement 5

I am looking for some opinions on using free AV for meet PCI requirement 5. The way I read this for version 2.0 is that it's entirely possible for a client to meet their AV needs with the modern free ...
17
votes
7answers
893 views

How to deal with a person who gets easily fooled by internet and mail scams?

alternative title: How to deal with a person who has gotten paranoid and doesn't want to go online anymore? A person, who has over the years been scammed many times, by bad spam/fraud emails, and ...
1
vote
3answers
297 views

How isolated are 2 operating systems on 1 harddisk?

Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they? I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
38
votes
4answers
22k views

Should I get an antivirus for Ubuntu?

Considering the recent thread regarding anti-virus for the Mac I wonder how many of the arguments put forth are relevant today to Linux systems, specifically Ubuntu. There are no known Ubuntu ...
0
votes
1answer
65 views

Is an Antivirus scan via network share equivalent to an offline scan of the system?

When a system is suspected to be infected, one of the measures often recommended for cleaning the system (without actually taking the "nuke from orbit" approach) is to scan the drive with anti-malware ...
5
votes
2answers
464 views

Signature-based antiviruses

Do signature-based antiviruses search for the exact matches of the signatures they have in their database with those of viruses to analyse ? I ask this question because I wonder if it is the reason ...
-4
votes
6answers
10k views

Will antivirus detect all keyloggers?

Our company schedules Security Training courses for our personnel. In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
1
vote
2answers
278 views

Do I need a hardware firewall even if I have Internet security software?

I have Kaspersky Internet Security 2010 installed on my Win7 computer. I assume it gives me enough protection for a software firewall(port security,tracking tcp,udp traffic etc.) Do I still need a ...