Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

2
votes
1answer
108 views

very bad malware that masquerades as spyware?

Has there ever been a known case where a machine acquired spyware like a browser toolbar, or plugin but that spyware also deployed more dangerous malware like a trojan, botnet, or worm?
2
votes
4answers
1k views

How would a keylogger bypass Wireshark sniffing?

I often see malicious keyloggers being advertised as having anit-wireshark feature. Meaning their data can't be sniffed. Is it possible to do so? How would they do it? My guess is that they just ...
1
vote
1answer
233 views

Can a program change the shortcut location of a browser to itself without UAC (Admin) in Windows?

I was reading an article on .desktop files used to spread malware on Gnome and KDE. I just thought that the same could be applied to Windows. On Windows: Malware is disguised as a picture by ...
3
votes
1answer
528 views

I accidentally installed an adware filled Firefox [solved]

I installed Firefox using a download site, rather than the correct site. After running and installing Firefox I noticed my Chrome had an addon called swift browser added to it by a third party. After ...
5
votes
4answers
887 views

How to keep Mac secure from viruses, malware and keyloggers?

How can I download and install software and make sure that it is not infected with viruses, malware or a keylogger? Also, I heard that Macs "don't get viruses". Is this true? Is it a good practice to ...
2
votes
1answer
147 views

Sonar power saving. Attacks and how to mitigate

I recently came upon a program called Sonar power saving that uses speakers and microphone to put the computer in power saving mode as long as you move away from the screen. http://stevetarzia.com/...
1
vote
1answer
136 views

Reliability of windows OS security for “program files” safe guard

I want to do inter process communication between Firefox (via extension) and my application. Both reside in "Program files" (of windows 7 OS). I also assume that malware is running in the system and ...
1
vote
1answer
1k views

Is there a foolproof method to remove spyware from Android smartphone?

I am owning an Android smartphone. I learnt that factory reset may not remove spyware as it might have corrupted the image being installed by factory reset. Is there a foolproof method which ensures ...
-2
votes
1answer
515 views

Removing Persistent MBR Malware [closed]

I do have a problem, how do I remove a persistent MBR malware? probably the malware hides itself in HDD sector that an OS couldn't even access. Already tried to format it and remove clean all ...
0
votes
3answers
2k views

Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7

Is it possible to protect Windows like Linux? I mean, I have Ubuntu installed on my laptop and when some program wants to install something etc. the pop up shows up and I need to type the password. ...
0
votes
1answer
138 views

Strange Virus Infecting My Server

I am currently working on a Web App on my dedicated server (LAMP) and it seems like it might be infected with some strange malware/virus of some kind. When I access some domains on that server (every ...
1
vote
0answers
61 views

Any Suggestion Exchanging shared key between process via port in untrusted machine (infected my malware)?

I am trying to get shared key between Firefox extension and a java program running in same machine. I am communicating both application via socket. My assumption is that malware is running in ...
1
vote
3answers
5k views

How to deal with a hacked laptop that's being remotely monitored

One of friends hacked my laptop and now whenever I come online he can tell what tabs are opened in my browser, so I think he is remotely monitoring me. I don't know how he did this, since I didn't ...
0
votes
1answer
187 views

someone claims to have created such a malware, can he be true?

These are not my lines they are by someone else on the internet. I also want to know is that malware that unique? How will it work in GPU and is there a way to sandbox such application? "HERE GOES ...
0
votes
1answer
498 views

Malware hidden on a USB drive, does the malware always need to run to hide itself? [duplicate]

Would malware be able to hide itself in the controller somehow or otherwise be able to effectively hide files itself from both windows and Linux?
2
votes
2answers
7k views

How do worms spread over LAN? [duplicate]

I've been researching LAN recently, and I came across a post talking about viruses spreading over LAN, and I was wondering, how is this possible? Would it not be a huge security issue to allow files ...
0
votes
2answers
505 views

Transmitting malicious code over audio speakers

In a post that reads like science-fiction, a security researcher claims that malicious code was being passed between computers. A few quotes: ... "badBIOS," as Ruiu dubbed the malware, has the ...
27
votes
3answers
3k views

Malware that can survive BIOS re-flashing

The well-respected security consultant Dragos Ruiu is reporting that he has been infected with mysterious malware that can survive re-installation of the OS and re-flashing of the OS. In other words, ...
0
votes
1answer
266 views

Is “Small HTTP server” malware?

I have used Small HTTP server in the past, years ago. I went to its website do download it again, but it has a dubious WOT rating: some say it is malware, some say it isn't. I proceeded to check it ...
10
votes
6answers
51k views

Scanning for files than have been encrypted by CryptoLocker

I am just asking in case someone has already done the analysis. A customer has a large set of network drives that were mapped to a CryptoLocker infected machine. The infection itself has been treated. ...
5
votes
1answer
471 views

Is Adobe Flash Player installer redirect due to a malware?

When I go to http://get.adobe.com/flashplayer/ 'Install Now' will redirect me to their homepage without downloading the update or any explanation. What could be going on? Is some malware ...
0
votes
2answers
4k views

Statistics about malware targeting different OS

Are there any reports or statistics that describe the numbers or types of malware attacks on different operating systems, such as Linux, Unix, Windows, MacOS?
0
votes
1answer
227 views

Mac OS: keylogger vulnerability & FileVault 2

I'm configuring my mac and encrypting my disks with FileVault 2. As the boot disk is encrypted at startup I have to login via the EFI partition before the OS will boot. From my understanding, most ...
0
votes
2answers
146 views

VM security, how to access main OS

Is there any way for me to access the main computer if the VM has been infected? Let's say that I am running Debian or ubuntu in a VM and the main computer uses Windows (or other way around just so ...
6
votes
3answers
1k views

How could malware like Stuxnet be detected?

Stuxnet and others in this list of state-of-the-art Internet worms had certain features that they were very stealthy in leaking out the information they harvested. Thus it managed to go under the ...
1
vote
1answer
88 views

Are virtual “canary” systems used to detect malicious programs?

I was wondering if malicious programs are detected using a virtual system. For example a "canary" system would be set up in a virtual environment then unknown and untrusted programs would be executed ...
1
vote
1answer
849 views

Orbit Downloader botnet program removal [solved]

Recently (shortly after midnight on 10/8/2013) I installed and ran Orbit Downloader. After learning that the latest version (4.1.1.8) has a botnet-like module included I immediately stopped the ...
6
votes
3answers
3k views

Possible to detect packed executable?

A packer is a way of obfuscating an executable program, i.e., transforming so the result is still executable and has the same effect when run, but looks different (so it won't be detected by static ...
-1
votes
1answer
304 views

Can someone remotely get into my computer and make it look like I typed something in a search? [closed]

Is it possible for someone to remotely manipulate the keys on my computer to make it look like I was typing?
0
votes
2answers
756 views

How does the Mega-D BotNet send spam?

I have just been reading an report that analyzed the Mega-D Botnet, but what I haven't fully understood is how they are used to send spam? What email address is the mail sent from? Does each bot ...
1
vote
0answers
37 views

Removing PHP Shell from server [duplicate]

I have looked at a few other questions related to this but nothing specifically answered what I was wondering about. Say for example you have a server that is infected with a php shell such as c99. ...
2
votes
2answers
425 views

Using a virtual machine as a buffer between USB media and OS

I was directed here from the Unix & Linux site. I've gone through some of the related questions, but they seem to be more concerned about whether a guest OS can access the host OS in someway. ...
0
votes
3answers
4k views

Malware Suddenly Uploaded To My Website! [duplicate]

This is my first question here on the IT Security section of Stack Exchange, so if there is any problems with my question I apologize. Basics Suddenly Google says that my website contains Malware! ...
0
votes
2answers
356 views

Random File downloaded

Okay so I was setting up stuff on my new mac earlier, downloading flash and office. They both downloaded and installed smoothly, but after I noticed a weird new file in my 'downloads' folder: jed+...
0
votes
0answers
17 views

How to remove popup malware - sponsorship/bigfintuna/milesandkms [duplicate]

I have a malware problem similar to the one described here and here and I'm looking for information on how to remove it. Spybot Search and Destroy and Malwarebytes Antimalware both give my computer a ...
0
votes
1answer
151 views

What is “KDV” in antivirus databases?

I scanned a file (virus) on VirusTotal and 3-5 antivirus labelled it as Generic.KDV.549626 Is there any central "KDV" database where all the entries related to a virus are stored?
2
votes
1answer
283 views

Where's the virus in this web site?

I made my friend go to this web site and it immediately infected his machine with malware (AntiVirus SecurityPro). It happened just by going to the front page. It seemed the malware started up, but ...
3
votes
5answers
189 views

Windows: Any method to enforce user confirmation before the browser opens a URL requested by an external desktop app?

A robust outgoing firewall will protect against desktop applications directly connecting to the internet without your permission. However, as the browser is a generally authorized application for ...
0
votes
1answer
184 views

What vulnerabilities does a malware exploit? [closed]

I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. ...
0
votes
3answers
1k views

How to find vulnerable sites on a web server

A client of mine has a managed VPS with dozens of websites on it, maybe even hundreds. Now his server keeps getting infected on a regular basis. The webhost / server admins keep digging in the dark. ...
1
vote
1answer
1k views

Static analysis of Android applications using Androguard

I am building a project a part of which involves performing static analysis for Android applications. I know of Androguard and its tools that help in analyzing Android apks. But I am stuck and don't ...
4
votes
1answer
2k views

How do I know if a font is malicious?

There are cases of fonts being used for exploiting vulnerabilities {for ex: ThreatPost, SecureList and F-Secure}. My question is if you ever get hands on such a font, how do you know that it is ...
1
vote
3answers
999 views

Text changing virus

Can malware change words that I have typed and then saved in the computer'? If so, how likely is this?
1
vote
3answers
2k views

What is “download-new.com”?

This strange site came up as the second result in a google search for itunes. http://download-new.com/apple-itunes/ (Although the url in the result read itunes.download-new.com.) Embarrassingly, I ...
0
votes
0answers
66 views

How to remove rootkits and malware? [duplicate]

I have downloaded and ran the programme Rootkit Hunter and the results are worrying. I don't know much about malware other than a malicious individual has persistently been installing it onto my ...
12
votes
2answers
5k views

How can a malicious URL affect a computer?

Many security experts advise not to click on malicious URLs. How can clicking a URL affect a computer's security? If a malicious file was downloaded and executed, then a computer's security may be ...
-3
votes
1answer
134 views

How deeply is Adobe inside your Windows environment? [closed]

Well basically as an experienced user I am really afraid on the way that Adobe deeply resides into all my Windows based workstations. Basically in every machine that has some Adobe solution when we ...
1
vote
1answer
555 views

Scan Source Code for Potential Viruses

If you are sent a program written by someone so that you have the complete source code, how would you go about scanning the source code for any potential viruses/malware? Note: While bugs and ...
-8
votes
1answer
472 views

Do you recognise this suspicious folder: Malicious or Benign [closed]

Does anyone recognise this suspicious folder that sits on my C drive? The folder sits on my C drive at C:\cacde6d0fd849a939328ab\ The name obviously looks like a hash/encryption/or junk text. The ...
0
votes
1answer
533 views

Remote Administration Tools and firewalls

I was faced with a question a few days ago, regarding how a RAT server can reach out through the firewall and connect to the client. This was something that I've never given any thought to before, so ...