Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.
-2
votes
0answers
52 views
Which programs do you use for analyzing unknown Binaries / malware? [closed]
I would like to know which are the best tools for analyzing unknown Binaries / malware ?
I used in the past
Wireshark
PE Explorer
HxD Hexeditor
File Analyzer
So i want to blog about some malware ...
19
votes
2answers
832 views
How secure is the Windows 8 included Anti Virus known as Windows Defender?
How secure is the new Windows 8 anti virus known as windows defender?
Does it have a protection against malware which uses UAC bypass/process injection/rootkits/process persistence/running the binary ...
5
votes
2answers
51 views
Are there faux/fake malicious websites to test web reputation services similar to EICAR?
Antivirus writers have agreed for their software to recognize a standard "fake" virus file - the EICAR file, to let users check, that the software is up and running.
Are there any equivalent test ...
2
votes
1answer
89 views
How Browsers prevents Malware and Phishing attacks
I want to know how phishing and malware protection features are implemented in modern browsers like Chrome, Firefox, IE etc. Are these features heuristic based, or do browsers maintain a list of ...
-1
votes
2answers
66 views
My Computer hacked?
I have Window 7 and believe it has been hacked. On two occasions, as I was reloading my operating system, I got a message that my computer had been counterfeited. I get the impression that my computer ...
2
votes
3answers
161 views
does switching to linux remove existing computer virus
if you change from a malware/spyware infected windows setup to a linux setup will infections migrate to linux if they were on the computer? (when you are hacked/infected is it the op system that is ...
-4
votes
1answer
50 views
Could win 7 malware stole the codes stored in virtualbox Ubuntu guest os? [closed]
Is VirtualBox good solution to prevent a malware to stole info from your virtualbox os (ubuntu) ?
I am using Windows 7 and want to migrate everything to Ubuntu 13.04, but I have a lot of things to do ...
13
votes
2answers
448 views
Is it possible to make a phone call appear to come from another phone, even to the network provider?
Quick Question
Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
-1
votes
2answers
72 views
my websites got infected with a malware i cannot get any info on [closed]
we have a server, on which we host about 30 sites.
these are test sites for our customers. most of them are not even indexed by google.
some run on php, some on nodejs, some on ruby.
all of them that ...
0
votes
2answers
74 views
Does keylogger see CTR+C and CTRL+V? [duplicate]
E.g. if I copy something from the email from my hosting company (name, password etc.) and paste it to the ftp client or some online form in the browser, do the keylogger get this name or password?
...
6
votes
3answers
365 views
Do I really need an Anti-Virus software if I'm careful about where I browse?
A friend told to me the following:
I don't use Anti-Virus software at all, I am just careful about where I go and what I click on.
I've also heard this from other people as I've repaired their ...
2
votes
1answer
83 views
Does Chrome OS Allow Executable Files?
My company has some real security issues and I am wondering if using Chrome OS can be some solution to my problem. Typical Windows computers seems all to vulnerable to attacks from malicious images ...
-4
votes
0answers
66 views
Google redirect to a unexpected page [closed]
I use google search my wanted page. But it went to somewhere else after I clicked the link.
I thought that it was google redirect virus. I used Kaspersky TDSSKILL to scan my laptop(windows 7 home ...
4
votes
1answer
115 views
Malicious script analysis
Could somebody tell me what can this malicious code do?
I see that in the beginning it turns off the error reporting and logging.
Then something with get post method and files stuff. But I am not ...
3
votes
1answer
97 views
What is the security purpose behind the “enable editing” of MS Word?
Whenever I open MS Word documents from my email, they open in "Protected View" with edit options disabled by default.
As per my understanding, the hyperlinks used in the main document would be linked ...
-1
votes
1answer
59 views
Malware persistence past a drive wipe? [duplicate]
Are there any known instances of malware persisting past a drive wipe and reinstall, through modified bios, or firmware on one of the machine components?
8
votes
3answers
259 views
Reason for writing Self-Decrypting Virus
What is the rationale behind writing a self-decrypting virus? By this I mean a virus that has it's payload encrypted, decrypts at runtime and runs it.
How does this protect the virus from antivirus ...
12
votes
4answers
598 views
Becoming a malware analyst?
So, I'm currently 16 and am considering a career in IT when I finish school. The thing that has intrigued me the most while growing up is malware. I've come across it so often and have often had to ...
-5
votes
0answers
31 views
MAC osx strange behaviour [closed]
I have a mac desktop that has worked well for years.
Max osx 10.8 lotsa tols and software installed.
Some how a new window has appeared ![enter image description here][1]What is this??
I do have a ...
-1
votes
1answer
94 views
Indexed link is taking to google brazil [closed]
It's happening in FF and Safari - Chrome works fine.
That, if I search for courfleurie.com in one of the two browsers, and when I click on the link, there, I am taken to google.com.br
I can visit ...
-4
votes
1answer
137 views
Am I part of a botnet or hack? [closed]
(FYI: my network has been hacked before...see other thread).
I have 2 routers daisy-chained. Router #1 hosts Windows PCs and a VOIP box on subnet 172. Its LAN4 goes to WAN of Router#2, which serves ...
-2
votes
0answers
104 views
History of RAT + Strange networking recently… was I hacked again? [closed]
(FYI, my PCs were infected and remote accessed in the past by a friend/stalker, & I’ve reinstalled the network few times already. Recently added Router#2 to double-NAT).
My network has 2 routers ...
-4
votes
0answers
126 views
Prevent Malware attack on my site [closed]
I built a wordpress site for a client. After some days, client reported that the site has been blocked by Google for Malware content. When I reviewed the site, I found some changes in the code like ...
19
votes
6answers
1k views
Malicious Links that Respond to Browsers but not curl or wget
There are some emails with links to people's cracked websites with a malware download
Like this kind of email:
fake DHL pack station email
... the links often take the form of:
http:// ...
0
votes
2answers
175 views
Somehow unexpectedly my computer got infected with malware
So I consider myself a pretty conscious computer user.
I run Windows 7 SP1 Pro 64bit and I update it.
For surfing on the web I use Firefox 20.0.1 - I keep it updated. I also have NoScript and AdBlock ...
-5
votes
2answers
153 views
What are the security risks of pirating video or music?
In the case of pirating multimedia, be it video or music, which problems may be caused by the video or music file itself? Could a video or an audio file be used to spread malware?
I'm talking about ...
5
votes
6answers
219 views
Safe to connect to external drive?
A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
2answers
210 views
Stopping js malware injection on our Wordpress site
This had been added to our wordpress site, specifically in the footer.php.
hxxp://pkktjuchlrv.peguards.cc/02b31ac5iq/get.js
It is malware as defined by google, i belive it is tracking code.
We have ...
2
votes
2answers
159 views
Example of malware that spreads via USB? [closed]
I'm messing with Mandiant Redline on Windows Server 2012 in a VM and I wanted to download a sample virus that spreads via USB and modify it to attack Mandiant Redline - I've never written malware ...
2
votes
2answers
156 views
How can I find the source of traffic allegedly originating from my IP address?
I have a problem that has been going on for at least 6 weeks.
I have Time Warner for my Internet provider and some websites hosted at GoDaddy.
From what GoDaddy tells me the reason I can not view ...
0
votes
2answers
109 views
Filehosting - Malicious or not? [closed]
I see a lot of file hosting services like rapidshare, mediafire etc. But, I wonder if some of them are malicious or not. Rapidshare seems okay, but there are many (obscure) sites like the ones below ...
2
votes
3answers
163 views
How to identify the Java program that is maliciously accessing my web site from many client addresses?
For many years, my personal web site receives numerous pairs of hits that look like this, every day:
202.xx.xx.xx - - [22/Apr/2013:12:02:26 +0000] "GET / HTTP/1.1" 200 5923 "-" "Java/1.4.1_04"
...
7
votes
3answers
225 views
How can I circumvent the lack of Java updates?
Just imagine you have a bunch of computers which need Java for some important software and you can't just switch to another vendor because all are using Java in this field of technology. If you start ...
2
votes
1answer
321 views
how is BAT_VOBFUS (or similar) dangerous?
I was reading http://about-threats.trendmicro.com/malware.aspx?language=au&name=BAT_VOBFUS.SM earlier today after it turned up in a scan of a friends PC. I suppose I may be missing something vital ...
6
votes
4answers
352 views
How can Antivirus differentiate between a Trojan and a normal remote desktop application software?
RAT (Remote Access Tool, e.g. Sub7) are considered malicious by Antivirus software. How can it distinguish between such patches and a client application for commercial software like NetSupport ...
0
votes
4answers
83 views
4
votes
1answer
86 views
Integrity check against package repository?
I have a Debian installed. When there are security updates, I review and install them as soon as possible and think about using automatic updates.
From time to time I want to boot from a clean boot ...
3
votes
1answer
199 views
Exploited by newbie3viLc063s
My debian server got exploited by some scriptiekiddie who used Newbie3viLc063
http://pastebin.com/jma8JRG1 .
Scriptkiddie uploaded logo_php.png to my server (My permissions sucked :s) and he did run ...
2
votes
2answers
116 views
Security Practices by Employees in a Corporate Environment
Consider the following situation :
1. Somehow my boss's system got infected with a malware ( He visited one of the Java exploits website).
2. He sends a PDF document containing the requirement ...
6
votes
3answers
296 views
Finding spam sending scripts?
What are the tips for finding email spam sending scripts? I ask because usually I hit a wall in shared hosting environments, so I ask this question as a way to get some insight from others.
What I ...
-2
votes
1answer
798 views
Can't figure out how to get rid of Snap.do [closed]
Every time I start Chrome there is the Snap.do page that seems to be set as the homepage no matter how many times I've changed the homepage settings on Chrome and I've removed Snap.do from extensions ...
2
votes
2answers
116 views
Is interpreted malware easier to detect than compiled malware?
Is compiled code more of a security risk than interpreted code? I'm under the impression that it is due to the fact that compiled code can hide malicious code from malware scans.
-1
votes
1answer
78 views
how malware is added to android app [closed]
I'm working on securing apps from malware attack in project. I just want to know how app is repackaged with malware. Because for reverse engg. we've apktool, dex2jar, Java decompiler. But how ...
-2
votes
1answer
85 views
Why isn't AV software configured to recognize installed program vulnerabilities?
Background (not necessary to read):
I've used a few different major AV programs day-to-day over the years, and not one has ever informed me I was running code with known vulnerabilities.
Not only ...
8
votes
1answer
95 views
Is there a public database of mutex names that are associated with malware?
I remember seeing something like this a while back, and it'd be incredibly useful for a project I'm working on. Essentially there was a list of mutex names, with a list of malware identifiers (e.g. ...
13
votes
2answers
2k views
What does this injected code do?
One of my sites has just been hacked as this code has been inserted into random(?) files and places within the files.
Does anyone understand what it is trying to do? I would welcome anything that may ...
-1
votes
2answers
86 views
Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]
Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
6
votes
4answers
320 views
Has my network/computer been breached?
I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes.
A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
-1
votes
1answer
86 views
What websites do you visit for up to date Malware info? [closed]
I'm expanding my understanding of Malware a lot more, as it's currently 0! I know how it behaves and propagates most times, but I don't have a clue about the latest threats out there, what it ...
5
votes
6answers
634 views
Using linux to combat windows flash drive malware?
I just put an old flash drive which i used with a windows machine into my linux. I noticed many files, mostly exes which were never visible in windows (my windows does not hide hidden files and ...
