Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

4
votes
1answer
181 views

Why run ondemand scanners in failsafe mode when the virus could have encrypted itself?

The internet is full of guides of how to remove malware on already infected computers. Normally, step 1 is to enter failsafe mode, so that the virus can't interfere with the anti-virus program that ...
2
votes
1answer
237 views

Skype is doing funny things when I type or click, does this necessarily mean malware may be in my computer?

I'm new to the IT Security Stack Exchange! This is my question: I've Skype installed on my Windows 7 computer. In the last few months I've noticed my mouse cursor blinks (I mean it shows that cursor ...
1
vote
3answers
116 views

Are dialers obsolete?

My antivirus picked up an infection by Dialer/Coulomb. The definition of a dialer is a piece of malware that dials a number that charges money. How would it do this, is this from when modems were ...
0
votes
1answer
391 views

Looking for Wepawet-like open source alternative [closed]

Is there any open source alternative to Wepawet ? I need to study techniques of JavaScript malware detection.
1
vote
1answer
156 views

How can a browser hijacking attack change the browser's default homepage?

Some attacks on web browsers consist simply of advertising, so the default homepage of the browser is changed (which is just a small aspect of browser-hijacking). My question: is installing ...
0
votes
1answer
56 views

What parameters to check to say that a computer running Windows is slow in responding because of infection?

When interaction between the user and the operating system is too slow (Windows become slow in responding to different user's request): what parameters could we check (and that we could use within a ...
0
votes
1answer
56 views

are webmalware able to hijack browsers?

Are webmalwares capbale of performing browser hijacking attacks ? Has there been any famous webmalware that functioned this way ?
-3
votes
1answer
106 views

What are the zombie's features under the control of hackers? [closed]

Zombies are used to to trigger denial of service attacks, spamming and so on. I wonder what type of control the miscreants use to control a remote computer using a virus/trojan ?I ask this question in ...
1
vote
1answer
170 views

Why do sandboxing environments not rely on antivirus programs?

Since years ago, miscreants use JavaScript to craft web malware attacks such as drive-by download attack that is used for example to install the famous CoolWebSearch virus. There are static methods ...
0
votes
1answer
93 views

Is installing malicious add-ons via drive-by attacks the only way to add new toolbars to browsers?

Some attacks on web browsers consist in installing new toolbars on the browser of the user (which is just a small aspect of browser-hijacking. My question: is installing (malicious) add-ons (via ...
1
vote
1answer
46 views

What are the webmalware effects on Windows XP?

I am redirecting URLs to a virtual machine (Windows operating system) to check if there is malware on the website i want to visit (JavaScript attacks, drive-by download attacks, infected pictures/PDF ...
5
votes
2answers
958 views

How to detect infected machines on my wifi?

I currently live in a building with around 40-50 other tenants (mostly students) and we all share one connection to the Internet using one of 3 wifi routers that are spread throughout the building. ...
4
votes
1answer
141 views

Recovering from malware in the registry

I'm a trainee who writes malware samples to later be tested. A basic piece I wrote in C++ kills explorer.exe, taskmgr.exe and repeats this every second. I used a bit of code to add my application ...
9
votes
3answers
692 views

How do I report new malware?

I have a new piece of malware that isn't detected by current anti-virus vendors. How do I report it to them? I want to do a good turn and help protect as many people as possible. What is the best ...
2
votes
2answers
199 views

Is my PC safe? need help

About 6 days ago my parents who aren't great with PCs got phished on gmail, and the account started spreading spam. It had been hacked on an Argentinian IP, and then logged in from IMAP and SMTP from ...
0
votes
1answer
74 views

Difference between binary malware and script-based malware?

I'm well aware in the concept of binary malware but I don't fully understand the idea of a script-based (or shell script) malware. I am more interested in the difference especially in how script-based ...
1
vote
1answer
200 views

Malware infected ATMs in China via specialized device

Hackers inserted a specialized device which was connected to the notebook into the card reader slot on the ATM and installed malicious software. 100 thousand US dollars were stolen from at least seven ...
0
votes
1answer
122 views

Can't log into Windows, mac-spoofing issue or malware?

My computer won't let me log into my account. On the Windows sign in screen it has my account name, but when I put in my password, it always says my password is wrong. No Caps Lock. This happened ...
0
votes
1answer
169 views

Is API hooking done by a process in a shared page, visible to all other processes?

Assume, I have an executable which hooks the API CreateFileW located in Kernel32.dll which is shared globally across the system for all other processes. From hooking I mean, that I have overwritten ...
2
votes
4answers
1k views

How would a keylogger bypass Wireshark sniffing?

I often see malicious keyloggers being advertised as having anit-wireshark feature. Meaning their data can't be sniffed. Is it possible to do so? How would they do it? My guess is that they just ...
0
votes
1answer
537 views

My cookies have been stolen. What to do?

About a month and a half ago I got infected by a virus called MSIL.Bladabindi. I noticed the virus quite soon because google notified me that someone from Turkey tried to access my account (I'm in ...
5
votes
2answers
352 views

Average time before a malware gets detected in the world

I am actually working on a scolar presentation about Careto malware. I was really impressed by the time it took to discover it (at least 6 years, according to some compilation stamps), so to improve ...
1
vote
1answer
152 views

Android's Encryption mechanism

Well, according to my Android smartphone, it says the phone has been encrypted. Should I be worried if it has a malware or if I get hacked because I once clicked a link on a certain website then I ...
0
votes
1answer
119 views

Valuable languages for working malwares

I would like a recommendation for programming languages which will be valuable when dealing with malware. I learn to code on C not on expert level(thanks god I didn't). But C doesn't seems so popular ...
0
votes
1answer
1k views

How is the new “Dyer” malware bypassing SSL?

Apparently the new Dyer malware is bypassing SSL to swipe bank credentials. I read that it's using "process hooks" to hook the browsers and see the data BEFORE it is encrypted and sent to the bank ...
11
votes
3answers
1k views

Retrieve files from possibly infected USB

I work in a lab environment, and save data to a shared PC. This PC is not networked, and so the only way to get the data from that PC to my own, is through USB. The lab director has mentioned that the ...
1
vote
2answers
340 views

Repercussions of hacked router?

I am staying in Thailand right now on a "long holiday" to do some work on my laptop. A few weeks I noticed that at the condo where I am staying, sometimes I am redirected to ad sites. I researched it ...
1
vote
1answer
903 views

Are my Snort rules correct?

I am trying to do a Snort demo and I though it would be nice to detect a real threat. I picked the sasser worm and the jolt/teardrop dos attacks for the demo; no particular reason. Out of the three ...
-1
votes
1answer
3k views

My command prompt opens itself periodically and closes itself immediately afterwards. It either displays nothing or displays this message: [closed]

[1] The command prompt also sometimes opens itself and then stays open until I close it. I have run MalwareBytes and SuperAntiSpyware and they find nothing. This is my hijack this log file. I don't ...
4
votes
4answers
3k views

Is online banking more secure on iOS than a desktop computer?

Does Apple's iOS provide a more secure environment for online commerce (banking or shopping) than Windows or Mac OS X? Since the only software that can run on iOS must be vetted by Apple, the ...
2
votes
1answer
496 views

Is winmail.dat a malware propagation vector?

Some of my coworkers use Microsoft Outlook (I believe) and have it configured in such a way that mail attachments are encapsulated in winmail.dat files. Apart from the general annoyance and lack of ...
1
vote
1answer
1k views

Can malware be activated by previewing email in Outlook's Preview pane?

It is common advice to not open suspicious email in order to avoid being infected by malware contained in the email. What constitutes opening an email in Outlook? Specifically, is viewing an email in ...
1
vote
3answers
268 views

Next steps to get rid of malware? [duplicate]

My father in law just had a problem,He clicked on a link in an email (he was using gmail on the version 35.0.1916.114m of Chrome), and suddenly the computer sort of went black, and possibly something ...
0
votes
2answers
69 views

Posting links to executable files and security

If someone is able to post on the forum of my website links to executable files (malware) hosted on remote websites: can we say that my website suffers from a security hole ?
1
vote
2answers
93 views

Can a drive-by download attack crash the OS?

Are there cases where a serious drive-by download attack could crash the operating system or the browser ?
1
vote
2answers
137 views

Question about “FUDing” with hex editor

I see a lot of materials in Internet about this technique. I'm not really interested in malwares, but I'm curious when you change bytes to an exe with other bytes, wouldn't this corrupt the exe? I can ...
1
vote
1answer
143 views

SpyProxy: how does it work?

I have been reading about SpyProxy. Can someone explain me this phrase I found in the article ? Here it is: We monitor the guest OS and browser through “triggers” installed to look for sandbox ...
-2
votes
1answer
182 views

How do i defeat cell phone spyware? [closed]

I've bought a new phone, where one of its products can be activated by receiving a phone call. If someone uses a spoofed SIM card - with a number I recognize - I'll likely answer the call. Are there ...
14
votes
3answers
3k views

Can a guest virtual machine be compromised by a virus on the host machine?

All questions ask about the other way round, ie. can a virtual machine compromise the host. But I'm asking can a virus on the host machine compromise the guest virtual machine?
0
votes
2answers
79 views

Which mechanism did Flame use to avoid being identified?

I got a question that says "What is the major difference in the USB propagation system used by Flame with regard to Stuxnet to prevent being identified?". After Googling for a while, I haven't found ...
-1
votes
1answer
830 views

How can we find out the fully undetectable virus and kill it in our computer? [duplicate]

As I know, most hacker can crypt the virus to bypass all antivirus. Even famous antivirus like kaspersky and avast doesn't know it. So, is there a good way to find out the FUD virus and protect from ...
-1
votes
1answer
60 views

process/program execution anomalies

How could I know if a given program is malicious by checking its CPU occupation, RAM consumption, network connexions, registry entries ... etc ? Maybe an other way to ask this question is: when could ...
0
votes
2answers
248 views

Do drive by download attacks include malicious file downloading?

I read every where that drive by download attack consists in downloading malware to the victim's PC and execute it without the victim's permission. My question: does this "download" term include ...
2
votes
3answers
161 views

Known windows malware propagated via unmounted iPhone

Last week I was told by our security department that my PC (running windows 7) was infected by a trojan and that it needed to be re-imaged. So re-imaged it was! Given the fact that I had been using ...
0
votes
1answer
467 views

How to combat and prevent a lpcloudsvr302 and bk-coretag.js Virus?

I recently came across a computer that was infected with a lpcloudsvr302 and a bk-coretag.js Virus. I did some research about the two Viruses and realized that their is no reliable source that helps ...
2
votes
2answers
3k views

Ways to inject malicious DLLs to exe file and run it

I'm trying to find all vulnerabilities in my given system. Assume a malicious user has the executable (.exe file) of my .NET application (C#), and a malicious DLL he or she created. Can the DLL be ...
2
votes
2answers
144 views

Is loopback interface protected from sniffing?

I'm trying to understand what are the risks derived from unprotected communications within the same device, by the use of the loopback interface. I've verified it is possible to capture packets, with ...
2
votes
1answer
139 views

Analyzing a suspicious email

Today I received a very suspicious email on my gmail account. When I analyzed the content of the message, this is what essentially made up the message. <center> <a alt="" ...
4
votes
2answers
1k views

How can NSA implants and backdoors be detected? [closed]

It has been a while now since the Snowden revelations of various NSA malware and backdoors. For instance: March 12, 2014: NSA has developed implants to take over targeted computers’ microphones ...
8
votes
3answers
1k views

How does a root kit work inside a virtual machine?

In my class, we are discussing virtual machine based root kits. I've research root kits, but could not find any information specifically talking about how root kits work inside of virtual machines ...