Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

0
votes
3answers
121 views

Does AV software protect web applications (Twitter, Facebook, etc) from attacks? (CSRF, etc)

Is it correct to say that AV software focuses on downloaded executables and locally malicious activity, and it doesn't actively scan HTTP/S content for web based attacks such as CSRF, XSS, phishing ...
2
votes
3answers
138 views

How to tell what viruses are covered by your anti-virus software

One of our corporate twitter accounts recently started sending out DMs to its followers. Looking at the content of these it seems we'd become infected with Troj/Mdrop-EML. All computers on our ...
4
votes
4answers
888 views

To what extent is FREE 3rd party antivirus software better than Windows 8 defender (if any)?

As someone who is not in a position to currently purchase an antivirus suite, I would like to know if having a free Avira or Avast or similar program is worth the overall system performance drop (I ...
64
votes
10answers
5k views

How do you explain the necessity of “nuke it from orbit” to management and users?

When a machine has been infected with malware, most of us here immediately identify the appropriate action as "nuke it from orbit" - i.e. wipe the system and start over. Unfortunately, this is often ...
2
votes
1answer
120 views

Is there a website or free downloadable program to identify and remove malware from an ISO file?

Is there a website or free downloadable program that allows a user to identify and remove multiple types of malware from an ISO file?
-4
votes
6answers
7k views

Will antivirus detect all keyloggers?

Our company schedules Security Training courses for our personnel. In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
2
votes
4answers
2k views

Is it necessary to scan users' file uploads by antivirus?

Web application allows users to upload files. Is it necessary to scan those files by antivirus? I'd want to hear answer in two scenarios: Type of file isn't checked when uploading. They are stored ...
8
votes
6answers
2k views

Whats the probability of a personal computer being hacked?

For a normal computer user following these practices: Have an up to date anti-virus with a firewall installed (Norton). Do not install cracked software. Do not open suspicious links or download ...
-4
votes
1answer
350 views

What are the technial and programming requirements for writing a stealth keylogger? [closed]

I'm planning to write/code one such stealth keylogger that would bypass detection by a certain antivirus. (I don't want to name the vendor as I know how good Google queries are against StackExchange ...
16
votes
5answers
958 views

Why would a virus writer bother to check to see if a machine is infected before infecting it?

I was looking at the tripartite structure of a virus, and it seems to check to see if a computer is infected before infecting it with the virus. Would this be an attempt to use files that are already ...
19
votes
4answers
2k views

Are anti-virus companies companies regularly committing software piracy?

As Mikko Hypponen highlighted in a recent tweet, anti-Virus companies collect and store both samples of malicious software and samples of legitimate software: This got me to thinking, what ...
7
votes
2answers
331 views

How do AV vendors choose malware names?

If you take a look at McAfee's recent malware page, you'll see that the names in the "Malware name" column aren't very human-readable: Downloader.a!cnz, W32/Autorun.worm.bgh, ...
-1
votes
2answers
7k views

Malware or buggy software gives Low Disk Space warning

Since a few days, I am getting an alert that in my c drive disk space is low. When I verified, free space in my c drive was decreasing hour by hour and there was a stage when it simply said that 0 mb ...
3
votes
4answers
372 views

Has any virus attempted to compromise the anti-virus database?

I was using an old version of Norton Anti Virus and the Live Update wouldn't run. The solution was to rename a file. This got me thinking if a virus could replace an anti-virus database with it's own ...
20
votes
2answers
754 views

Cohen's problem

Fred Cohen determined theoritically that viral detetction is an undecidable problem. Can anyone provide an intuitive reasoning for that? Background Fred Cohen experimented with computer viruses ...
1
vote
2answers
2k views

Avast says I don't need to use encrypted connections for my e-mail accounts

I am using Outlook 2010 and Avast anti-virus 7. Whenever I add an account to Outlook if I choose to use SSL for incoming or outgoing connections Avast alerts me I shouldn't use it because Avast can't ...
4
votes
1answer
172 views

How does my antivirus determine which CTL is used?

I have imported a trusted root certificate into the Windows local machine list. This works fine with my signed certificates, unless my AV (Bitdefender Antivirus Plus 2012) is set to "scan SSL", in ...
3
votes
5answers
1k views

How can I know if my PC is getting infected?

I have installed an antivirus, but as no antivirus is perfect, what can I do to diagnose if my PC is getting infected? For example, keeping a close eye on what programs and tasks run when I turn my ...
3
votes
2answers
553 views

Why do I get AV alerts when browsing a web page?

I'm using the latest version of Firefox and Windows is up to date. When I was browsing a webpage and clicked a link the browser displayed "connection has been reset" and AVAST poped-up saying "Alert!" ...
0
votes
2answers
230 views

How could an AV detect a virus that has a chance of not decrypting itself?

If I understand this correctly there is a chance the virus may not decrypt itself at all. How could an AV catch this? In some cases, the decryptor may start with a header whose intent is not ...
-1
votes
1answer
131 views

Would this be plausible for a metamorphic virus? Not repeatedly infecting same system

Would this be plausible for a metamorphic virus? When a new generation (for lack of better word) is created it would hard code a random file name, that would be checked to see if the system was ...
1
vote
2answers
265 views

AV inserting email header logic

I want to write a small PHP emailing class to be able to send HTML emails. My problem is that in the receiving email an antivirus will insert a header which sometimes simply breaks the entire email. ...
3
votes
1answer
276 views

Does anti-virus/security software protect against NTFS ADS?

I know that NTFS has features called ADS which may be used to hide malware. So does antivirus/security software, such as Norton 360, protect against this type of attack?
1
vote
4answers
6k views

Is it ok to use computer while scanning for viruses?

Should one refrain from using the computer while a virus scan is in progress? Are there certain things that are ok and others not? For example is it ok to use a web browser while a scan is in ...
3
votes
1answer
14k views

does Avast SafeZone actually make a difference?

SafeZone is a feature in Avast Anti-Virus which is like a virtual machine that only has a web broswer. The benifit of this is that it can't be infected with spyware and isn't suseptible to keylogers. ...
2
votes
1answer
157 views

How are AV scanners protecting against encrypted (PGPd) malicious code?

As a user of PGP I worry about receiving a virus that was previous encrypted with my public key, which anybody can get by querying many PGP key servers. What prevents an attacker to target a PGP user ...
3
votes
3answers
541 views

How do polymorphic/metamorphic/self-encrypting/self-changing file infectors know if they have infected a file or not?

If a virus rewrites itself for each infection how would it know if it has infected a file or not? If it keeps infecting the same file soon the whole file structure will be corrupt. For example how ...
2
votes
2answers
203 views

How do viruses know if they have already infected a system or done something?

I know some viruses repeat the same actions over and over again with no break, thus grinding the network to a halt. But others "take a break" from there repetitive actions. For example Nimda ...
1
vote
2answers
347 views

Antivirus for Thesis

I just want to ask if you know any book or technical papers and theses regarding computer viruses and anti-viruses. 'cause we're having a hard time looking for updated books regarding ...
3
votes
2answers
479 views

Why does Antivirus Softwares have an Issue with EXE Packers

Im trying to pack an Executable using an Exe Packer like UPX.I packed and checked the File with VirusTotal.com.Here some 9 Antivirus Products say its a Virus actually its a harmless exe.I think the AV ...
1
vote
2answers
170 views

Which MTA don't have antivirus check for outbound emails?

I need to test whether MTA has antivirus check for inbound emails. To check this I need to send email with e.g. EICAR testfile from another MTA to this one. However, Gmail, Yahoo and other well-known ...
2
votes
3answers
1k views

Do I have a virus on my hosted site?

A few weeks ago I hired an outsourcer from India to build for me a very simple PHP site. I bought PHP hosting and a domain name, and I gave him all the credentials together with the specification of ...
3
votes
5answers
3k views

What's a free recommended anti-spyware program for Windows? [closed]

Its been years since I installed an anti-spyware program. Keyloggers and other nasties might have gotten installed and so I'm looking for a program to flush them out. I used to use Spybot-S&D, but ...
5
votes
1answer
390 views

How antivirus companies create virus defnitions for new outbreaks

This question quite amazes me. I dont understand how antivirus companies get info about the latest viruses. have they installed some kind of filters to monitor the internet traffic ? Or they are ...
0
votes
1answer
86 views

Are there privacy implications with ESET Web Protection?

I got the most recent ESET Cyber Security Beta for Mac. It offers a mode called “Web Protection” and “Email Protection”. The documentation don’t really explain what these two modes does, and I’m ...
4
votes
2answers
261 views

Remotely fingerprint AV software on LAN machines?

Does anyone know of a method to fingerprint machines in the LAN and find out what kind of AV software is installed?
5
votes
3answers
3k views

How to scan USB drive with clamav on Linux

Is there a way to scan the entire drive including auto-run and all partitions, including the master boot record (MBR)?
6
votes
4answers
496 views

How bad is a source code leak for an antivirus?

I was reading that Symantec suffered a source code leak and I was wondering how bad this is for a anti-virus product. Do these products rely heavily upon "(in)Security Through Obscurity" or does it ...
5
votes
3answers
488 views

How do anti-virus & anti-malware programs protect themselves?

I would assume that A/V products would need to employ the same kinds of techniques used by the software they are trying to cleanse to ensure that they can continue to run in such hostile environments. ...
13
votes
4answers
1k views

How is a worm different from a virus?

In spite of various online articles, I'm a bit unclear on the distinction between a "worm" and a "virus". Two related questions-- Is there a useful and clear distinction here or no? If so, what is ...
5
votes
2answers
1k views

Antivirus for scanning anonymous file uploads

Since I have no experience with AV solutions on Unix-like environments, I would need help with suggestions on something that can be suitable for scanning files that are uploaded by anonymous users ...
3
votes
2answers
123 views

When using a recovery disk, like AVGs boot-able CD, to scan for viruses, malware etc… what are the limitations?

What I like about about the boot-able CD concept, is it can connect to the Internet and get updates, however I'm not clear how effective they are at really finding things that are heuristic? How do ...
6
votes
3answers
355 views

Do any antivirus products use “canary files” to detect rootkits?

Recently, I've learned how some rootkits are able to hide certain files, services, etc. from programs in the kernel or user modes. This got me wondering: Are there any antivirus programs, or other ...
3
votes
4answers
337 views

What is the purpose of EICAR?

For as long as can remember, EICAR has been used to test for the presence of Antivirus systems in email, the file system, or other places. Sometimes the AV solution is so far out of date, that its ...
4
votes
5answers
178 views

Should there be an anti-virus used on client provided files?

This is based on Stack Exchange podcast # 25. I really don't understand why there would need to be virus checking on uploaded files. It would generally be a bad idea to execute anything which was ...
12
votes
3answers
36k views

How serious is InstallIQ?

Background: Recently I've seen hits for InstallIQ a "potentially unwanted application" from ESET. From what I can find it seems like this is an installer wrapper that asks people to install other ...
1
vote
1answer
272 views

Why does Microsoft Security Essentials remove Chrome in some situations?

According to Google, Microsoft Security Essentials is currently detecting some versions of the Chrome browser as malware. Could someone have hacked Google and put a virus into some Chrome updates? ...
9
votes
8answers
700 views

Battling Malware without spending money

Our environment consists of about 80 users running Windows 7. Previous to me showing up as a full time IT employee, the company had contracted an outsource IT solution. As part of their set up, they ...
3
votes
1answer
439 views

Is there a viable open source antivirus for OS/X? [closed]

I am interested in finding an antivirus program for the Mac, but not one from Symantec, because I don't trust them. I wonder if perhaps there is an open source solution for antivirus for OS/X? Or ...
63
votes
15answers
4k views

How to write an email regarding IT Security that will be read, and not ignored by the end user?

I've observed that several of our users are ignoring messages sent from IT Security managers, and also the system generated "You just sent a virus" notifications. The problem seems to be among people ...