Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.
3
votes
1answer
199 views
Exploited by newbie3viLc063s
My debian server got exploited by some scriptiekiddie who used Newbie3viLc063
http://pastebin.com/jma8JRG1 .
Scriptkiddie uploaded logo_php.png to my server (My permissions sucked :s) and he did run ...
2
votes
2answers
116 views
Security Practices by Employees in a Corporate Environment
Consider the following situation :
1. Somehow my boss's system got infected with a malware ( He visited one of the Java exploits website).
2. He sends a PDF document containing the requirement ...
-2
votes
1answer
799 views
Can't figure out how to get rid of Snap.do [closed]
Every time I start Chrome there is the Snap.do page that seems to be set as the homepage no matter how many times I've changed the homepage settings on Chrome and I've removed Snap.do from extensions ...
8
votes
1answer
1k views
Detecting reflective DLL injection
In the past few years, malware (and some pen-test tools like Metasploit's meterpreter payload) have begun to use reflective DLL injection (PDF) to load a DLL into the memory of a process. The benefit ...
2
votes
2answers
116 views
Is interpreted malware easier to detect than compiled malware?
Is compiled code more of a security risk than interpreted code? I'm under the impression that it is due to the fact that compiled code can hide malicious code from malware scans.
-1
votes
1answer
78 views
how malware is added to android app [closed]
I'm working on securing apps from malware attack in project. I just want to know how app is repackaged with malware. Because for reverse engg. we've apktool, dex2jar, Java decompiler. But how ...
-2
votes
1answer
85 views
Why isn't AV software configured to recognize installed program vulnerabilities?
Background (not necessary to read):
I've used a few different major AV programs day-to-day over the years, and not one has ever informed me I was running code with known vulnerabilities.
Not only ...
8
votes
1answer
95 views
Is there a public database of mutex names that are associated with malware?
I remember seeing something like this a while back, and it'd be incredibly useful for a project I'm working on. Essentially there was a list of mutex names, with a list of malware identifiers (e.g. ...
5
votes
6answers
634 views
Using linux to combat windows flash drive malware?
I just put an old flash drive which i used with a windows machine into my linux. I noticed many files, mostly exes which were never visible in windows (my windows does not hide hidden files and ...
-1
votes
2answers
86 views
Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]
Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
7
votes
4answers
7k views
Security issues with allowing Dropbox installations on client PC's in our organisation
Does anyone know if there is any good reasons not to allow Dropbox installations on our client PC's? All the PC's have antivirus installed and running. I know it is an additional attack vector to ...
6
votes
4answers
320 views
Has my network/computer been breached?
I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes.
A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
-1
votes
1answer
86 views
What websites do you visit for up to date Malware info? [closed]
I'm expanding my understanding of Malware a lot more, as it's currently 0! I know how it behaves and propagates most times, but I don't have a clue about the latest threats out there, what it ...
6
votes
5answers
339 views
How do I safely inspect a suspicious email attachment?
I received a pretty blatantly spammy email to my Gmail account. I'm not really sure how it made it through the spam filters, since it has all of the telltale signs. The FROM field is spoofed as ...
6
votes
2answers
213 views
Statistics on purposes of viruses/malware
Are there any resources that analyze the purpose or goal or the major viruses/malware out in the wild today? For example, what percentage are used to construct botnets (for DDoS or something else)? ...
3
votes
1answer
333 views
Looking for URL Blacklists of Malicious Websites [closed]
Is there a maintained list of URLs that contain malicious content. These URLs may be involved in Phishing, Scams, Viri, or other Malware.
Please indicate in your answer if the list is freely ...
-1
votes
1answer
133 views
What are some current attacks or malware that exist? [closed]
I was recently asked in an interview to talk about some types of malware that currently exist and what their methodology is. I spoke about the most obvious piece, Stuxnet, and it didn't really help my ...
2
votes
4answers
430 views
How can I detect backdoors?
I have a machine running Mac OS X and I suspect there may be a backdoor installed.
I know that I could take it to a professional security firm for analysis, or nuke it from orbit, but I'm interested ...
2
votes
2answers
391 views
New Undetected Virus?
I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example:
Before:
Partition T:\
...
1
vote
4answers
242 views
Can JavaScript be used to install malware?
Looking at the Pwn2Own contest got me thinking:
http://arstechnica.com/security/2013/03/pwn2own-carnage-continues-as-exploits-take-down-adobe-reader-flash/?comments=1
If you have all plugins turned ...
0
votes
2answers
399 views
Infected usb flash drive detection and cleaning
Want to know what all type of malware infections are their that hides themselves in a pendrive completly and infects machine silently.How to detect this type of malware as they cannot be seen.
How to ...
9
votes
1answer
311 views
Could once infected machine be ever trusted again?
I'm just about to switch to a new SSD drive, so I figured it's a good occasion for a really, really fresh start. I reconsidered every installed piece of software, uninstalled lots of crap ...
4
votes
4answers
342 views
Site constantly getting infected
I am the webmaster of some websites running Typo3, 2 of which are getting infected constantly. These 2 sites are being owned by the same client.
Something happens on those 2 sites that causes ...
17
votes
6answers
980 views
Best practices for handling computer viruses
I realize this question may be quite broad (and hopefully not a violation of the FAQs), but I'm interested in hearing how many of you handle a computer infected with Malware.
In a small-to-medium ...
25
votes
3answers
1k views
Stack Overflow is www.doioig.gov/? If not, then could I be infected
Great! I made a post recently where I mentioned that my system might be infected. Now something new came up. When I search for Stack Overflow on Google, I see that the URL is www.doioig.gov/. When I ...
0
votes
2answers
136 views
No where to run, no where to hide - suggestions to improve personal security needed
I think that as a windows user, I have no where to run and no where to hide.
In the windows world no matter how many precautions I take, I can get infected by -
1 - Drive by on legal and popular ...
12
votes
6answers
699 views
Why do malware creators use such clever technologies for such silly purposes?
Some days ago I got infected by a malware, probably something new and very clever, as it went in unstopped and no scanning tool was able to detect it afterwards (see this question).
It was a ...
7
votes
5answers
581 views
Detecting malware-infected USB drives
I'm about to distribute some relatively cheap promotional usb drives to some of my company's clients. I'm fairly confident the company I purchased them from wouldn't intentionally implant malware on ...
1
vote
3answers
135 views
How to Detect Zimbra Sniffing Trojan
I am a sys admin of our system, we are running zimbra as email server in our environment. I got the following message from the CEO.
"Everytime I send or receive an email - I get a SPAM ads a few ...
0
votes
2answers
401 views
Regedit shows strange chinese characters in my system - should I be worried?
I suspect that my system has been hacked into. I see huge drops in free hard disk space for a while and then the space returns to near old values. A few days ago, when i clicked 'my computer', i saw ...
2
votes
5answers
365 views
malware classification based on action
Where can I get info with a view to classify malware based on actions performed by the them. Eg. modifying registry files, copying themselves into other executable's etc.
6
votes
4answers
987 views
Pursuing a career in Malware Analysis
When I was a kid, I want to become a Malware Analyst and work in a Antivirus company. At that time, I love to try out different antivirus solutions and did a research project on Computer ...
1
vote
1answer
84 views
Compromised server with psyBNC - what are our next steps?
One of our VPS servers has an install of psybnc on it. The install has been present for quite some time, and has now been brought to our attention. We have backups, but they also have psybnc on them. ...
11
votes
5answers
514 views
Checking if notebook is clean of hardware spyware
Are there any simple steps one can follow to verify if a notebook is clean from hardware spyware?
What should be looked for? How should it look?
If any visual tutorials with photographs are ...
1
vote
2answers
266 views
How to Secure My DropBox Installation?
I am sharing a DropBox Folder with by Friends for a project so that we can be updated with each other progress. But i was not very convince after reading the How secure is Dropbox?. What if one of my ...
7
votes
3answers
1k views
How to manage admin rights for helpdesk staff?
My question is about issuing administrative rights to helpdesk staff in a large Active Directory setting.
Helpdesk staff commonly require administrative rights to provide support for end users. I ...
2
votes
2answers
638 views
Need advice on linux server being hacked
I'm currently trying to find out how one of our centos servers was compromised. We were experiencing malware on our sites. After searching I finally found the malware injecting into the sites. As it ...
17
votes
6answers
460 views
How to deal with a person who gets easily fooled by internet and mail scams?
alternative title: How to deal with a person who has gotten paranoid and doesn't want to go online anymore?
A person, who has over the years been scammed many times, by bad spam/fraud emails, and ...
0
votes
2answers
128 views
How isolated are 2 operating systems on 1 harddisk?
Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they?
I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
1
vote
4answers
589 views
My website has been hacked, what do i do next? [closed]
So. I couldn't see any other question like this on Sec.Se so i thought i'd ask.
My public website www.foo.com has been hacked. The front page is sending it to be redirected to seoblog.fooblog.com in ...
3
votes
2answers
173 views
How content-type:image can lead to infected JAR file?
Symantec published a news about a malvertising campaign targeting IE users with Java exploits (already known vulnerabilities). At some point they explain that the users are redirected on malicious ...
6
votes
2answers
114 views
Process authentication for Linux
Is there any possibility to authenticate a running process in Linux to be sure that this is the original/right one?
I know that an Linux operating system is only that secure like the way you use it. ...
20
votes
6answers
855 views
Why are vulnerabilities and lack of security possible in computers?
I have heard about computer vulnerabilities, virus, malware, etc.
Why are these threats possible?
Why doesn't the computer just do the things it is supposed to?
Why do some people write malware, ...
5
votes
2answers
390 views
Does the Mebromi BIOS flashing rootkit mean APTs for personal computers are here?
With the recent discovery of the Mebromi BIOS firmware virus/MBR rootkit http://www.theregister.co.uk/2011/09/14/bios_rootkit_discovered/ in the wild are we now actually in the age of Advanced ...
4
votes
4answers
356 views
Is online banking more secure on iOS than a desktop computer?
Does Apple's iOS provide a more secure environment for online commerce (banking or shopping) than Windows or Mac OS X? Since the only software that can run on iOS must be vetted by Apple, the ...
7
votes
1answer
378 views
How to study the packets sent by a keylogger
One of my friends runescape account got hacked through key-logger. He downloaded a runescape gold generator from a file sharing site and tried to use it.
I have a strong doubt that it is a key-logger. ...
5
votes
2answers
161 views
How does the predator network prevent outside control by an attacker?
I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus.
Does this command and control system communicate with the ...
1
vote
1answer
605 views
Android apk malware
I was browsing some website last night and that website suddenly sent me an apk called 'browser_update_install.apk', DrWeb light detect it and was able to delete it.
My question here is about the apk ...
17
votes
4answers
1k views
Reverse engineering malware/viruses
Assuming a machine has malware, regardless of how it got there, one thing I would like to learn to do is to take the binary file and reverse engineer it to see what the malware is doing/has already ...
4
votes
3answers
417 views
Malware infections from visiting or using YouTube
Is it possible to be infected by viruses or other malware while visiting YouTube?
What kind of measures do the YouTube staff take to prevent viruses and malware?
