Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

1
vote
1answer
22 views

Task Manager shows higher total CPU usage than the sum of all running processes. Keylogger?

In Windows Task Manager and AVG Task Manager (included in TuneUp Utilities), I see that the sum of all the running processes is much lower than the total CPU usage shown in "performance" tab. Does ...
2
votes
0answers
24 views

Removing malware which is creating temp file and modifying network traffic

I am on OSX 10.9.2, please note I have included several URLs in my post, this is not spam this is due to the nature of the malware. I have just discovered I have malware on my computer after noticing ...
-6
votes
0answers
24 views

iPhone & windows pc malware removal and reverse tracking of perpetrators location, ip, et al [on hold]

There are various examples of malware available for sale nowadays, spybubbble being one of the best. cheaper alternatives eventually leave traces (clicks, hissing noises, crossed lines etc.) a key ...
2
votes
1answer
57 views

Where to submit collected malware from my honeypot?

wondering if you could help me. i setup the Dionaea honeypot and have collected 6 or 7 malware files. Unfortunately upon checking the Dionaea logs it keeps giving the error "Couldn't resolve host" for ...
1
vote
2answers
101 views

Efficacy of self-made ransomware protection

I was recently wondering about how to circumvent malware such as the infamous Cryptolocker a while back and was wondering about the efficacy of having a set of files with known content in a known ...
0
votes
0answers
10 views

How many kbdclasses are normal?

I use a laptop and never had used any external keyboards. Is there a keylogger hiding? What to do?
18
votes
3answers
4k views

Are popular porn sites more likely to be infected with malware?

I'm trying to help my friend understand this because he believes that since a site is very popular, that it's less likely to infect its viewers because of its security! Is a popular site less likely ...
2
votes
1answer
35 views

When does it make sense to whitelist some subdomains but not others for a given domain?

Little Snitch has been useful to get a better handle on all the connections my computer tries to make. It's main dialog to allow or deny connections allows customizing (e.g. require specific port, or ...
6
votes
1answer
129 views

Skype called someone and connected to them with no action on my part. What do I do?

This happened to me today, September 12, at about 6pm. Any ideas about what happened, what's going on, and what I should do? I was at home alone with my 2 year old -- I was feeding her dinner. All of ...
-1
votes
3answers
128 views

What are the differences in Linux and Windows security that cause Windows to get so many more viruses? [closed]

I am trying to gain a more detailed understanding of specific features of the Windows and Linux security models that makes Windows so much more prone to infection by viruses than Linux. As an example ...
1
vote
1answer
58 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
5
votes
7answers
858 views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
2answers
125 views

Trying to get rid of hackers who have access to all my devices

What is the best way to go about getting rid of hackers that have gained access to all my personal computers, (both old and recently purchased) phones, and even random computers I use to simply get ...
1
vote
3answers
99 views

If malware was detected in browser local storage does computer need to be nuked from orbit

I haven't used Windows partition since mid-June and I booted the system once again just a few days ago. My first action was as usual update all programs marked to be updated (including Windows ...
0
votes
1answer
118 views

How to execute an exploit without user interaction?

Is there an existing exploit, virus or malware that doesn't need any user interaction? In metasploit for example. No link to clicked, no pdf to open , no vba or exe to execute by the victim.
0
votes
0answers
27 views

Application Privilege Control in Kaspersky blocks program with no digital signature

I made a small application that displays hello world to the console output and attempted to open it in another computer that had Kaspersky fully updated. When I ran the application, Kaspersky gave a ...
0
votes
3answers
190 views

How to search for evidence of Camfecting (webcam hacking)?

I'm worried about camfecting (webcam hacking). The camera light on my mac (running OSX) is not on, but it isn't hard wired so that doesn't say a lot. I've ran a virus scan but no signs. Now my idea ...
1
vote
1answer
65 views

Is it possible to compromise Bing to redirect user to a malware?

I just got a new laptop and the first thing I wanted was to install Chrome. I opened IE and searched for "google chrome" in Bing. The first result was an ad with the link pointing to ...
0
votes
1answer
39 views

Virus (or Trojan) in Android

Definition of virus is (from Wikipedia): A computer virus is a malware program that, when executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data ...
-2
votes
1answer
91 views

Interesting security demos for beginners [closed]

I am thinking about a creating short security demo to get people interested in the security topic. I've had a couple of ideas just want to see if anyone has anything else interesting. Edit: I was ...
2
votes
0answers
52 views

Are malware detection rulesets publicly discoverable?

I am uncertain about how public malware detection rulesets are? By a "ruleset" I mean the rules, usually written in Yara, that malware detection engines use to determine whether a file or memory ...
-1
votes
0answers
9 views

Are there any data sets from previous mobile forensic acquisitions available?

Even though the question by itself arises big privacy concerns, I would like to ask if there are datasets publicly or under specific agreements available, related to post-mortem forensic acquisitions ...
0
votes
2answers
757 views

Sophos virus protection continuously blocking codegv.ru

While using google chrome I keep getting a pop-up from Sophos saying "High Risk Website Blocked - Access has been blocked to "codegv.ru" It happens every time I perform any action in google chrome. ...
1
vote
0answers
34 views

My website redirects to malware link [migrated]

I coded my own website and uploaded to a host. Some days ago I realized that in front page suddenly redirects to an unknown websites, until 3-4 redirects. The redirects ends up at: ...
24
votes
4answers
11k views

Does a Virtual Machine stop malware from doing harm?

I would like to know if it is save for the host system of a virtual machine (VM - VirtualBox OSE in my case) to execute malware. Can a virus break out and read or write data from the host system? ...
0
votes
1answer
42 views

How do I secure X server against spyware in a GUI application?

Suppose you have a GUI application, that potentionally may be too curious about your environment, such as the list of window titles. How do I limit application's ability to enumerate windows, capture ...
2
votes
2answers
85 views

How to get rid of an Ad bot?

The issue started due to setting up a proxy server on a PC connected to my network. I then realized that all of my devices that connected to the network, including PCs and phones, are all infected by ...
0
votes
1answer
38 views

Virtual Penetration Test Lab - Figuring Out Its Market Size

Is there any reliable data available based on which the Global Market Size of Virtual Pen Testing Labs ( or Cyber Ranges ) can be ascertained ? If NOT , is it possible to calculate it ?
-1
votes
0answers
49 views

Is it safe to play around with this on a virtual machine? [duplicate]

I found a hard drive destroyer and I am trying to see exactly what it does and what it looks like while happening. I also do not want to lose my computer in the process. I downloaded VirtualBox and ...
0
votes
1answer
161 views

Hacking Gmail with 92 Percent Success - Does popular GUI framework designs reveal UI state change ?

The media has been claiming for the last 2 days that GMail can be hacked . http://www.cnet.com/news/researchers-find-way-to-hack-gmail-with-92-percent-success-rate/ They have based their ...
0
votes
1answer
53 views

Sandbox environment for “php malware” analysis [closed]

I would like to know how can I analyse an obfuscated malware php code ? I heard about cuckoo sandbox, but it seems too overwhelming for this particular task. So I decided to run a Vagrant box, install ...
4
votes
5answers
917 views

Is it possible for a phone to be transmitting even while turned off and the battery removed?

Is it technically or theoretically possible for any part of a mobile phone's circuitry to be still on and transmitting even while turned off and the battery has been removed? If so, how? I am ...
15
votes
3answers
791 views

URL Shortening - How to verify if it is a non-malicious URL?

Again, I must mention that I have just started to learn about security. So, please bear with my newbie questions. If I receive a shortened URL from somewhere, say in an my-email or in a social media ...
0
votes
0answers
36 views

Attacker able to install Screencapturing Software in Windows 7 Guest Account

I am operating in a guest account of Windows 7. Could an attacker that got onto my pc through malware i installed install a video program that records everything i do and send the result back to his ...
1
vote
1answer
54 views

Is this behavior the result of malware?

I have setup a new set of servers to test a software in Amazon EC2, and had set up my application. I've given it public access and a DNS entry, so its easily reachable by those that need to test it ...
1
vote
1answer
7k views

How much can someone see from my iPhone by connecting to my wifi

How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
11
votes
2answers
2k views

Where do I find JavaScript malware?

I am looking for JavaScript malware. I need it just for local tests on my computer for a project I am working on. Are there any Internet resources where I could find this?
5
votes
2answers
230 views

Do Javascript malware signatures exist?

Are there signatures for malicious JavaScript codes as they exist for other viruses/worms/trojans developed in other programming languages ? If so, are these javascript malware signatures defined ...
6
votes
0answers
229 views

CSP Reports: Ignoring Client Malware

I'm seeing a lot of Content Security Policy (CSP) reports raised because of client-side malware. Many have "blocked-uri" entries like randomstring.cloudfront.net, something.akamaihd.net... I would ...
2
votes
5answers
175 views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
2
votes
1answer
78 views

I need help identifying the cause of weird outbound traffic from my network

I have some weird traffic heading outbound from my network. It is being blocked by the firewall from exiting and I'm not sure what the source is. I've looked at the machine and don't see anything ...
24
votes
7answers
7k views

Is making a clean install enough to remove potential malware?

Is formatting the disk and reinstalling the system from scratch (to Ubuntu) enough to remove any potential hidden software spyware, keyloggers etc.? Or can something still persist installed in the ...
0
votes
2answers
91 views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?
1
vote
2answers
129 views

Is monitoring registry hives enough to detect new malware installation?

Is checking the state of the supporting files of the Windows registry hives enough to detect if a new software/malware has been installed on the computer or a given Windows regsitry key has been ...
66
votes
7answers
35k views

How secure are virtual machines really? False sense of security?

I was reading this CompTIA Security+ SYO-201 book, and the author David Prowse claims that: Whichever VM you select, the VM cannot cross the software boundaries set in place. For example, a ...
1
vote
2answers
66 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
9
votes
5answers
630 views

Can a mobile phone battery contain malware?

It has 3 terminals and is presumably a smart battery. I bought it on ebay recently for $2.74 USD and that included postage from China to Australia. It would normally retail for maybe $40 - $50. The ...
1
vote
1answer
45 views

The threat of video metadata

There are various old questions on stack exchange which say that malicious code in file metadata can potentially be executed when the file is opened (here, here, and here for example). They are all ...
0
votes
0answers
94 views

Which system files are targeted by malware on Windows XP?

On Windows XP, what are the main system files and DLL files are targeted by malware ? I need this information in order to make a hash of those files and check if my system will be compromised in the ...
-2
votes
1answer
77 views

Unrecognizable Icon. Virus?

Sorry I'm not sure this would be the best place but I've noticed this icon recently. I'm not sure what it is and it only pops up sometimes. When it does, I can't click it or do anything to it and it ...