Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

0
votes
1answer
37 views

Sandbox environment for “php malware” analysis [on hold]

I would like to know how can I analyse an obfuscated malware php code ? I heard about cuckoo sandbox, but it seems too overwhelming for this particular task. So I decided to run a Vagrant box, install ...
0
votes
0answers
28 views

Attacker able to install Screencapturing Software in Windows 7 Guest Account

I am operating in a guest account of Windows 7. Could an attacker that got onto my pc through malware i installed install a video program that records everything i do and send the result back to his ...
-6
votes
0answers
51 views

In which language most of malwares for Android are written [closed]

In which language malicious applications for Android are written? In Java or in C++? I will be very grateful if somebody answer me.
1
vote
1answer
46 views

Is this behavior the result of malware?

I have setup a new set of servers to test a software in Amazon EC2, and had set up my application. I've given it public access and a DNS entry, so its easily reachable by those that need to test it ...
4
votes
5answers
226 views

Is it possible for a phone to be transmitting even while turned off and the battery removed?

Is it technically or theoretically possible for any part of a mobile phone's circuitry to be still on and transmitting even while turned off and the battery has been removed? If so, how? I am ...
-2
votes
0answers
43 views

Are WeChat and Sina safe?

I live in North America. One of my co-workers raves about WeChat because he could meet new people and help them to learn English. In addition, he's interested in learning more about China from ...
2
votes
1answer
64 views

I need help identifying the cause of weird outbound traffic from my network

I have some weird traffic heading outbound from my network. It is being blocked by the firewall from exiting and I'm not sure what the source is. I've looked at the machine and don't see anything ...
2
votes
5answers
136 views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
11
votes
2answers
2k views

Where do I find JavaScript malware?

I am looking for JavaScript malware. I need it just for local tests on my computer for a project I am working on. Are there any Internet resources where I could find this?
0
votes
2answers
237 views

Sophos virus protection continuously blocking codegv.ru

While using google chrome I keep getting a pop-up from Sophos saying "High Risk Website Blocked - Access has been blocked to "codegv.ru" It happens every time I perform any action in google chrome. ...
0
votes
2answers
57 views

If malware was detected in browser local storage does computer need to be nuked from orbit

I haven't used Windows partition since mid-June and I booted the system once again just a few days ago. My first action was as usual update all programs marked to be updated (including Windows ...
0
votes
2answers
79 views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?
1
vote
2answers
59 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
1
vote
1answer
42 views

The threat of video metadata

There are various old questions on stack exchange which say that malicious code in file metadata can potentially be executed when the file is opened (here, here, and here for example). They are all ...
-2
votes
1answer
71 views

Unrecognizable Icon. Virus?

Sorry I'm not sure this would be the best place but I've noticed this icon recently. I'm not sure what it is and it only pops up sometimes. When it does, I can't click it or do anything to it and it ...
-2
votes
0answers
33 views

After typing a web address, unwanted content “salesforce.com” appears in it and redirects me [migrated]

When I type a web address in my web browser, "force.com" or "salesforce.com" comes up in it. Here's an example: https://k12parentportal.force.com/portal_enrollmenthome>. Everything is correct except ...
2
votes
2answers
203 views

Antivirus settings: delete or quarantine the file?

I understand that most antiviruses by default quarantine infected files. I have changed it to remove all infected files immediately. Would this cause more harm than good?
29
votes
6answers
3k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...
3
votes
2answers
110 views

Can the USB standard be fixed to prevent the “firmware attack”?

Wired, and others are reporting on a research paper by Karsten Nohl and Jakob Lell. The paper apparently shows how any USB device (not just memory sticks) can be infected with malware at the firmware ...
-1
votes
1answer
47 views

Problem in downloading and browsing [closed]

My downloads stop completing and some page in the browser appearing blank or with text only without css or js and so on, some program after complete return me a message when trying to start ...
1
vote
3answers
652 views

Is JavaScript malware as dangerous as native viruses? [closed]

Can JavaScript malware be as dangerous and damaging as more traditional viruses that are programmed mostly in native APIs?
4
votes
2answers
1k views

Could a malicious JS file pointed on URL/URI attack the browser/computer?

I found some website blacklisted on Google. I mean when you try to visit them, you get something like shown on this picture: After a small search, I found that some of them have a malicious ...
0
votes
2answers
62 views

How exactly does this Flash malware function on Ubuntu?

In this video, an experienced Ubuntu user manages to infect his system with some sort of malware. This is the first example I've ever seen of truly successful malware in the wild aside from privilege ...
0
votes
3answers
116 views

Can a PDF file contain a virus?

Could a PDF file contain any type of malwares ?
1
vote
2answers
85 views

Do multiplatform viruses exist? [closed]

Is there any known virus that targets the main operating systems: Windows, Linux and Mac OS X?
1
vote
1answer
25 views

When does it make sense to whitelist some subdomains but not others for a given domain?

Little Snitch has been useful to get a better handle on all the connections my computer tries to make. It's main dialog to allow or deny connections allows customizing (e.g. require specific port, or ...
0
votes
1answer
45 views

Questions about common exploits

I'm investigating the state of my MacBook Pro which I know was compromised, and do not know if I removed the exploits completely (and I realize, technically will never know this). I'm trying to hone ...
0
votes
1answer
66 views

Ubuntu 12.04 server attacked using Wordpress vulnerability (plugin?) [duplicate]

Env Rackspace cloud server Wordpress 3.9.1 Ubuntu 12.04 Linux web.mydomain.com 3.2.0-67-virtual #101-Ubuntu SMP Tue Jul 15 17:58:37 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux History These may ...
25
votes
6answers
3k views

How can normal files hide a virus?

How can normal files supported in the Windows operating system hide a virus? Sometimes opening a .txt , .jpg or .docx files leads to running a virus. How is this possible?
0
votes
3answers
96 views

Has personal computing security gotten better or worse in recent years? [closed]

I have a lot of experience with software as a developer, and am trying to move from newbie to more informed about present-day security. Everything I uncover makes me feel that personal computers have ...
0
votes
3answers
87 views

is it possible to upload infected pictures to a website?

I have a small website on which users can upload several types of files: images, zip files ... (except .exe files). Suppose a user uploads via the front end interface of my website a picture which is ...
1
vote
3answers
219 views

How to tell if my laptop is being spied on

I've been trying to determine if there is malware on my OS X 10.9.3 Mac, that is could be doing keylogging or other forms of non-destructive intrusion. Given the (not technically based) suspicion I ...
1
vote
2answers
92 views

Identifying suspicious encrypted traffic [duplicate]

Firstly, I welcome a better title for this question. I admit I'm a security novice. I'm trying to determine whether I have malware and what that malware may be doing. Using Wireshark, I see several ...
2
votes
3answers
100 views

Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?

Preferably with a vanilla Linux kernel i.e. not using SELinux or GrSecurity? Lately there has been a case of in-the-wild UNIX server malware: ...
4
votes
1answer
77 views

How does malware hooks ASEPs?

What are the operations made by malware to hook the auto start extensibility points in order to be able to run at the startup of the computer that runs Windows operation system ?
1
vote
1answer
48 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
4
votes
1answer
135 views

Why run ondemand scanners in failsafe mode when the virus could have encrypted itself?

The internet is full of guides of how to remove malware on already infected computers. Normally, step 1 is to enter failsafe mode, so that the virus can't interfere with the anti-virus program that ...
0
votes
0answers
91 views

Which system files are targeted by malware on Windows XP?

On Windows XP, what are the main system files and DLL files are targeted by malware ? I need this information in order to make a hash of those files and check if my system will be compromised in the ...
1
vote
2answers
110 views

Is monitoring registry hives enough to detect new malware installation?

Is checking the state of the supporting files of the Windows registry hives enough to detect if a new software/malware has been installed on the computer or a given Windows regsitry key has been ...
2
votes
1answer
87 views

Skype is doing funny things when I type or click, does this necessarily mean malware may be in my computer?

I'm new to the IT Security Stack Exchange! This is my question: I've Skype installed on my Windows 7 computer. In the last few months I've noticed my mouse cursor blinks (I mean it shows that cursor ...
26
votes
4answers
2k views

Should I get an antivirus for Ubuntu?

Considering the recent thread regarding anti-virus for the Mac I wonder how many of the arguments put forth are relevant today to Linux systems, specifically Ubuntu. There are no known Ubuntu ...
1
vote
3answers
79 views

Are dialers obsolete?

My antivirus picked up an infection by Dialer/Coulomb. The definition of a dialer is a piece of malware that dials a number that charges money. How would it do this, is this from when modems were ...
0
votes
1answer
39 views

What parameters to check to say that a computer running Windows is slow in responding because of infection?

When interaction between the user and the operating system is too slow (Windows become slow in responding to different user's request): what parameters could we check (and that we could use within a ...
1
vote
1answer
37 views

What are the webmalware effects on Windows XP?

I am redirecting URLs to a virtual machine (Windows operating system) to check if there is malware on the website i want to visit (JavaScript attacks, drive-by download attacks, infected pictures/PDF ...
1
vote
1answer
103 views

Why do sandboxing environments not rely on antivirus programs?

Since years ago, miscreants use JavaScript to craft web malware attacks such as drive-by download attack that is used for example to install the famous CoolWebSearch virus. There are static methods ...
-3
votes
1answer
80 views

What are the zombie's features under the control of hackers? [closed]

Zombies are used to to trigger denial of service attacks, spamming and so on. I wonder what type of control the miscreants use to control a remote computer using a virus/trojan ?I ask this question in ...
0
votes
1answer
35 views

Difference between binary malware and script-based malware?

I'm well aware in the concept of binary malware but I don't fully understand the idea of a script-based (or shell script) malware. I am more interested in the difference especially in how script-based ...
2
votes
2answers
121 views

Is my PC safe? need help

About 6 days ago my parents who aren't great with PCs got phished on gmail, and the account started spreading spam. It had been hacked on an Argentinian IP, and then logged in from IMAP and SMTP from ...
0
votes
1answer
62 views

Is installing malicious add-ons via drive-by attacks the only way to add new toolbars to browsers?

Some attacks on web browsers consist in installing new toolbars on the browser of the user (which is just a small aspect of browser-hijacking. My question: is installing (malicious) add-ons (via ...
0
votes
1answer
64 views

How can a browser hijacking attack change the browser's default homepage?

Some attacks on web browsers consist simply of advertising, so the default homepage of the browser is changed (which is just a small aspect of browser-hijacking). My question: is installing ...