Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.
6
votes
5answers
84 views
Becoming a malware analyst?
So, I'm currently 16 and am considering a career in IT when I finish school. The thing that has intrigued me the most while growing up is malware. I've come across it so often and have often had to ...
-5
votes
0answers
25 views
MAC osx strange behaviour [closed]
I have a mac desktop that has worked well for years.
Max osx 10.8 lotsa tols and software installed.
Some how a new window has appeared ![enter image description here][1]What is this??
I do have a ...
0
votes
1answer
46 views
Indexed link is taking to google brazil [closed]
It's happening in FF and Safari - Chrome works fine.
That, if I search for courfleurie.com in one of the two browsers, and when I click on the link, there, I am taken to google.com.br
I can visit ...
-4
votes
1answer
107 views
Am I part of a botnet or hack? [closed]
(FYI: my network has been hacked before...see other thread).
I have 2 routers daisy-chained. Router #1 hosts Windows PCs and a VOIP box on subnet 172. Its LAN4 goes to WAN of Router#2, which serves ...
-2
votes
0answers
80 views
History of RAT + Strange networking recently… was I hacked again? [closed]
(FYI, my PCs were infected and remote accessed in the past by a friend/stalker, & I’ve reinstalled the network few times already. Recently added Router#2 to double-NAT).
My network has 2 routers ...
-4
votes
0answers
55 views
Prevent Malware attack on my site [closed]
I built a wordpress site for a client. After some days, client reported that the site has been blocked by Google for Malware content. When I reviewed the site, I found some changes in the code like ...
16
votes
5answers
397 views
Malicious Links that Respond to Browsers but not curl or wget
There are some emails with links to people's cracked websites with a malware download
Like this kind of email:
fake DHL pack station email
... the links often take the form of:
http:// ...
0
votes
2answers
143 views
Somehow unexpectedly my computer got infected with malware
So I consider myself a pretty conscious computer user.
I run Windows 7 SP1 Pro 64bit and I update it.
For surfing on the web I use Firefox 20.0.1 - I keep it updated. I also have NoScript and AdBlock ...
-5
votes
2answers
129 views
What are the security risks of pirating video or music?
In the case of pirating multimedia, be it video or music, which problems may be caused by the video or music file itself? Could a video or an audio file be used to spread malware?
I'm talking about ...
5
votes
6answers
208 views
Safe to connect to external drive?
A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
1answer
115 views
Stopping js malware injection on our Wordpress site
This had been added to our wordpress site, specifically in the footer.php.
hxxp://pkktjuchlrv.peguards.cc/02b31ac5iq/get.js
It is malware as defined by google, i belive it is tracking code.
We have ...
2
votes
2answers
141 views
Example of malware that spreads via USB? [closed]
I'm messing with Mandiant Redline on Windows Server 2012 in a VM and I wanted to download a sample virus that spreads via USB and modify it to attack Mandiant Redline - I've never written malware ...
2
votes
2answers
128 views
How can I find the source of traffic allegedly originating from my IP address?
I have a problem that has been going on for at least 6 weeks.
I have Time Warner for my Internet provider and some websites hosted at GoDaddy.
From what GoDaddy tells me the reason I can not view ...
0
votes
2answers
99 views
Filehosting - Malicious or not? [closed]
I see a lot of file hosting services like rapidshare, mediafire etc. But, I wonder if some of them are malicious or not. Rapidshare seems okay, but there are many (obscure) sites like the ones below ...
1
vote
0answers
35 views
Problem: Restrictions in effect on computer. Asking me to contact my system administrator [migrated]
This started happening when I had to restart my computer for an exam so I can get it working faster. When I rebooted it, it stopped giving me the option to do alt-F4 to be able to shut down, ...
2
votes
3answers
142 views
How to identify the Java program that is maliciously accessing my web site from many client addresses?
For many years, my personal web site receives numerous pairs of hits that look like this, every day:
202.xx.xx.xx - - [22/Apr/2013:12:02:26 +0000] "GET / HTTP/1.1" 200 5923 "-" "Java/1.4.1_04"
...
7
votes
3answers
222 views
How can I circumvent the lack of Java updates?
Just imagine you have a bunch of computers which need Java for some important software and you can't just switch to another vendor because all are using Java in this field of technology. If you start ...
2
votes
1answer
174 views
how is BAT_VOBFUS (or similar) dangerous?
I was reading http://about-threats.trendmicro.com/malware.aspx?language=au&name=BAT_VOBFUS.SM earlier today after it turned up in a scan of a friends PC. I suppose I may be missing something vital ...
6
votes
4answers
330 views
How can Antivirus differentiate between a Trojan and a normal remote desktop application software?
RAT (Remote Access Tool, e.g. Sub7) are considered malicious by Antivirus software. How can it distinguish between such patches and a client application for commercial software like NetSupport ...
0
votes
4answers
78 views
4
votes
1answer
77 views
Integrity check against package repository?
I have a Debian installed. When there are security updates, I review and install them as soon as possible and think about using automatic updates.
From time to time I want to boot from a clean boot ...
3
votes
1answer
191 views
Exploited by newbie3viLc063s
My debian server got exploited by some scriptiekiddie who used Newbie3viLc063
http://pastebin.com/jma8JRG1 .
Scriptkiddie uploaded logo_php.png to my server (My permissions sucked :s) and he did run ...
2
votes
2answers
115 views
Security Practices by Employees in a Corporate Environment
Consider the following situation :
1. Somehow my boss's system got infected with a malware ( He visited one of the Java exploits website).
2. He sends a PDF document containing the requirement ...
6
votes
4answers
268 views
Finding spam sending scripts?
What are the tips for finding email spam sending scripts? I ask because usually I hit a wall in shared hosting environments, so I ask this question as a way to get some insight from others.
What I ...
-2
votes
1answer
596 views
Can't figure out how to get rid of Snap.do [closed]
Every time I start Chrome there is the Snap.do page that seems to be set as the homepage no matter how many times I've changed the homepage settings on Chrome and I've removed Snap.do from extensions ...
2
votes
2answers
112 views
Is interpreted malware easier to detect than compiled malware?
Is compiled code more of a security risk than interpreted code? I'm under the impression that it is due to the fact that compiled code can hide malicious code from malware scans.
-1
votes
1answer
68 views
how malware is added to android app [closed]
I'm working on securing apps from malware attack in project. I just want to know how app is repackaged with malware. Because for reverse engg. we've apktool, dex2jar, Java decompiler. But how ...
-2
votes
1answer
81 views
Why isn't AV software configured to recognize installed program vulnerabilities?
Background (not necessary to read):
I've used a few different major AV programs day-to-day over the years, and not one has ever informed me I was running code with known vulnerabilities.
Not only ...
7
votes
1answer
83 views
Is there a public database of mutex names that are associated with malware?
I remember seeing something like this a while back, and it'd be incredibly useful for a project I'm working on. Essentially there was a list of mutex names, with a list of malware identifiers (e.g. ...
12
votes
2answers
1k views
What does this injected code do?
One of my sites has just been hacked as this code has been inserted into random(?) files and places within the files.
Does anyone understand what it is trying to do? I would welcome anything that may ...
-1
votes
2answers
82 views
Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]
Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
6
votes
4answers
311 views
Has my network/computer been breached?
I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes.
A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
-1
votes
1answer
84 views
What websites do you visit for up to date Malware info? [closed]
I'm expanding my understanding of Malware a lot more, as it's currently 0! I know how it behaves and propagates most times, but I don't have a clue about the latest threats out there, what it ...
5
votes
6answers
577 views
Using linux to combat windows flash drive malware?
I just put an old flash drive which i used with a windows machine into my linux. I noticed many files, mostly exes which were never visible in windows (my windows does not hide hidden files and ...
6
votes
5answers
314 views
How do I safely inspect a suspicious email attachment?
I received a pretty blatantly spammy email to my Gmail account. I'm not really sure how it made it through the spam filters, since it has all of the telltale signs. The FROM field is spoofed as ...
-1
votes
1answer
108 views
What are some current attacks or malware that exist? [closed]
I was recently asked in an interview to talk about some types of malware that currently exist and what their methodology is. I spoke about the most obvious piece, Stuxnet, and it didn't really help my ...
2
votes
4answers
352 views
How can I detect backdoors?
I have a machine running Mac OS X and I suspect there may be a backdoor installed.
I know that I could take it to a professional security firm for analysis, or nuke it from orbit, but I'm interested ...
2
votes
2answers
339 views
New Undetected Virus?
I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example:
Before:
Partition T:\
...
1
vote
4answers
202 views
Can JavaScript be used to install malware?
Looking at the Pwn2Own contest got me thinking:
http://arstechnica.com/security/2013/03/pwn2own-carnage-continues-as-exploits-take-down-adobe-reader-flash/?comments=1
If you have all plugins turned ...
0
votes
2answers
313 views
Infected usb flash drive detection and cleaning
Want to know what all type of malware infections are their that hides themselves in a pendrive completly and infects machine silently.How to detect this type of malware as they cannot be seen.
How to ...
9
votes
1answer
293 views
Could once infected machine be ever trusted again?
I'm just about to switch to a new SSD drive, so I figured it's a good occasion for a really, really fresh start. I reconsidered every installed piece of software, uninstalled lots of crap ...
3
votes
1answer
260 views
Looking for URL Blacklists of Malicious Websites [closed]
Is there a maintained list of URLs that contain malicious content. These URLs may be involved in Phishing, Scams, Viri, or other Malware.
Please indicate in your answer if the list is freely ...
4
votes
4answers
315 views
Site constantly getting infected
I am the webmaster of some websites running Typo3, 2 of which are getting infected constantly. These 2 sites are being owned by the same client.
Something happens on those 2 sites that causes ...
0
votes
2answers
135 views
No where to run, no where to hide - suggestions to improve personal security needed
I think that as a windows user, I have no where to run and no where to hide.
In the windows world no matter how many precautions I take, I can get infected by -
1 - Drive by on legal and popular ...
25
votes
3answers
1k views
Stack Overflow is www.doioig.gov/? If not, then could I be infected
Great! I made a post recently where I mentioned that my system might be infected. Now something new came up. When I search for Stack Overflow on Google, I see that the URL is www.doioig.gov/. When I ...
1
vote
3answers
126 views
How to Detect Zimbra Sniffing Trojan
I am a sys admin of our system, we are running zimbra as email server in our environment. I got the following message from the CEO.
"Everytime I send or receive an email - I get a SPAM ads a few ...
0
votes
2answers
321 views
Regedit shows strange chinese characters in my system - should I be worried?
I suspect that my system has been hacked into. I see huge drops in free hard disk space for a while and then the space returns to near old values. A few days ago, when i clicked 'my computer', i saw ...
1
vote
1answer
79 views
Compromised server with psyBNC - what are our next steps?
One of our VPS servers has an install of psybnc on it. The install has been present for quite some time, and has now been brought to our attention. We have backups, but they also have psybnc on them. ...
1
vote
2answers
246 views
How to Secure My DropBox Installation?
I am sharing a DropBox Folder with by Friends for a project so that we can be updated with each other progress. But i was not very convince after reading the How secure is Dropbox?. What if one of my ...
2
votes
2answers
550 views
Need advice on linux server being hacked
I'm currently trying to find out how one of our centos servers was compromised. We were experiencing malware on our sites. After searching I finally found the malware injecting into the sites. As it ...
