Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

1
vote
2answers
66 views

Can a drive-by download attack crash the OS?

Are there cases where a serious drive-by download attack could crash the operating system or the browser ?
1
vote
2answers
84 views

Question about “FUDing” with hex editor

I see a lot of materials in Internet about this technique. I'm not really interested in malwares, but I'm curious when you change bytes to an exe with other bytes, wouldn't this corrupt the exe? I can ...
5
votes
6answers
17k views

Scanning for files than have been encrypted by CryptoLocker

I am just asking in case someone has already done the analysis. A customer has a large set of network drives that were mapped to a CryptoLocker infected machine. The infection itself has been treated. ...
1
vote
1answer
57 views

SpyProxy: how does it work?

I have been reading about SpyProxy. Can someone explain me this phrase I found in the article ? Here it is: We monitor the guest OS and browser through “triggers” installed to look for sandbox ...
-2
votes
1answer
76 views

How do i defeat cell phone spyware? [closed]

I've bought a new phone, where one of its products can be activated by receiving a phone call. If someone uses a spoofed SIM card - with a number I recognize - I'll likely answer the call. Are there ...
13
votes
3answers
1k views

Can a guest virtual machine be compromised by a virus on the host machine?

All questions ask about the other way round, ie. can a virtual machine compromise the host. But I'm asking can a virus on the host machine compromise the guest virtual machine?
0
votes
2answers
69 views

Which mechanism did Flame use to avoid being identified?

I got a question that says "What is the major difference in the USB propagation system used by Flame with regard to Stuxnet to prevent being identified?". After Googling for a while, I haven't found ...
2
votes
1answer
103 views

How to deal with resistant malware

Everytime I visit Gmail, Facebook, YouTube, or Yahoo mail, I get a popup "Please update Internet Explorer" (while I'm using Chrome!). I don't have screenshots but this website describes the problem. ...
8
votes
5answers
1k views

Pursuing a career in Malware Analysis

When I was a kid, I want to become a Malware Analyst and work in a Antivirus company. At that time, I love to try out different antivirus solutions and did a research project on Computer ...
-1
votes
1answer
137 views

How can we find out the fully undetectable virus and kill it in our computer? [duplicate]

As I know, most hacker can crypt the virus to bypass all antivirus. Even famous antivirus like kaspersky and avast doesn't know it. So, is there a good way to find out the FUD virus and protect from ...
0
votes
1answer
31 views

process/program execution anomalies

How could I know if a given program is malicious by checking its CPU occupation, RAM consumption, network connexions, registry entries ... etc ? Maybe an other way to ask this question is: when could ...
0
votes
2answers
117 views

Do drive by download attacks include malicious file downloading?

I read every where that drive by download attack consists in downloading malware to the victim's PC and execute it without the victim's permission. My question: does this "download" term include ...
2
votes
3answers
100 views

Known windows malware propagated via unmounted iPhone

Last week I was told by our security department that my PC (running windows 7) was infected by a trojan and that it needed to be re-imaged. So re-imaged it was! Given the fact that I had been using ...
0
votes
1answer
405 views

How to combat and prevent a lpcloudsvr302 and bk-coretag.js Virus?

I recently came across a computer that was infected with a lpcloudsvr302 and a bk-coretag.js Virus. I did some research about the two Viruses and realized that their is no reliable source that helps ...
2
votes
2answers
433 views

Ways to inject malicious DLLs to exe file and run it

I'm trying to find all vulnerabilities in my given system. Assume a malicious user has the executable (.exe file) of my .NET application (C#), and a malicious DLL he or she created. Can the DLL be ...
1
vote
2answers
65 views

Is loopback interface protected from sniffing?

I'm trying to understand what are the risks derived from unprotected communications within the same device, by the use of the loopback interface. I've verified it is possible to capture packets, with ...
2
votes
1answer
93 views

Analyzing a suspicious email

Today I received a very suspicious email on my gmail account. When I analyzed the content of the message, this is what essentially made up the message. <center> <a alt="" ...
0
votes
3answers
235 views

Can Malware Physically Damage A Hard Drive?

I recently responded to an incident of supposed malware infection. The symptoms where simply "my computer is freezes at random times". The response ended with replacement of the physical hard drive ...
3
votes
2answers
381 views

How can NSA implants and backdoors be detected? [closed]

It has been a while now since the Snowden revelations of various NSA malware and backdoors. For instance: March 12, 2014: NSA has developed implants to take over targeted computers’ microphones ...
9
votes
5answers
1k views

Ads appearing in our application when they should not be

I received a strange issue reported by one of my web application users. Apparently they are getting "ads" within the browser window when using my application. I didn't add advertisements at all. It's ...
6
votes
3answers
636 views

Possible to detect packed executable?

A packer is a way of obfuscating an executable program, i.e., transforming so the result is still executable and has the same effect when run, but looks different (so it won't be detected by static ...
7
votes
3answers
723 views

How does a root kit work inside a virtual machine?

In my class, we are discussing virtual machine based root kits. I've research root kits, but could not find any information specifically talking about how root kits work inside of virtual machines ...
10
votes
3answers
433 views

How to deobfuscate this PHP malware?

Two days ago a file called "images.php" appeared on a friend's server, which he noticed because it caused errors. The file contained the following. This code is of unknown origin and presumed to be ...
1
vote
1answer
147 views

Computer worms, propagation and exploiting vulnerabilities

I have been referred here to ask this question, so I am doing a research on computer worms, I have been through several sites and a few caught my attention, I have learnt that worms propagate through ...
2
votes
1answer
165 views

How to detect infected devices on your local network [closed]

Today I read about a researcher who bought a digital TV recorder and connected it to the internet - probably using port forwarding to enable attackers to connect to the recorder. After a while someone ...
1
vote
2answers
169 views

Does Skype compromise my system (beyond the scope of calls/chats)?

First of all, please don't shout at me for wanting to use Skype. I know that it's evil and I fully expect all the calls and text chats going through it to be stored permanently in govt data centers, ...
1
vote
2answers
110 views

Shared hosting hacked. Should I report this to someone?

A malware file appeared on a friend's server as described in this question. It's a file called "images.php" that is designed to look like nothing important, whose sole function is to wait for an ...
1
vote
3answers
121 views

Where do suspect requests from logged-in users to my website come from?

I have an ASP.Net MVC 4 web application that is hosted on a Windows 2008 server. The application is secured by a custom ASP.Net membership provider. Only users who are granted permission by the admin ...
4
votes
1answer
244 views

Can I isolate a specific computer on my network?

My brother gets malware infections practically every week. Apparently he had a infection over the past 24 hours, I only noticed it because I checked the router logs and saw a massive amount of network ...
-2
votes
1answer
118 views

How malware spreads nowadays [closed]

How malware nowadays spreads? For example, I have a Windows computer infected with some kind of malware (someone ran malicious executable on the computer when nobody was looking at it) and it can ...
13
votes
2answers
17k views

Is it possible to make a phone call appear to come from another phone, even to the network provider?

Quick Question Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
1
vote
1answer
32 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
0
votes
1answer
159 views

JS malware detection

Is there a way to detect a malicious JavaScript code within a webpage before the script runs on my computer ? I want to develop a Python script that prevents from 8 JS malwares that I can embed on my ...
13
votes
4answers
6k views

Can home routers get infected?

I am behind a router(linksys that runs dd wrt on it) and I was infected with sality. I'm curious, can my router get infected too? If yes, how can I remove the infection? I used the search bar but ...
-3
votes
2answers
113 views

What makes iOS more secure than other phone OS [closed]

Let's start off with an example. Here in Canada, credit card companies cannot upgrade you credit card limit. You need to make a request, that will then get analyzed and then, depending on your status ...
3
votes
3answers
2k views

Malware infections from visiting or using YouTube

Is it possible to be infected by viruses or other malware while visiting YouTube? What kind of measures do the YouTube staff take to prevent viruses and malware?
1
vote
1answer
72 views

Why an attacker would use a trojan over a spyware?

I'm trying to figure out some possible attack scenarios for a project I'm conducting. I've read plenty of material about malware and, in particular, spyware and trojans. While it's hard to find unique ...
1
vote
3answers
179 views

Malware stole an executable file on my computer? Seems unlikely

If you don't want to read all of the details, skip to the bottom; I'll make a summary. I created a computer program as a proof of concept (I threw it together in 12 hours, so I wrote it in Visual ...
0
votes
2answers
93 views

Can malware cause firefox to send GET requests?

Is it possible for a site to host malware such that if a certain page is accessed, Firefox is made to send additional GET requests? I'm seeing traffic for attacks coming from me that I haven't done. ...
-1
votes
2answers
174 views

I have discovered a botnet during testing [closed]

Whilst testing a server I discovered a botnet. I have the executable downloaded to the server and decompiled the file to get the strings from it. My question is what would the next logical step be ...
1
vote
2answers
338 views

Is a C plugin safe if I read it through an echoing parser before?

I wanted to use sharable plugins for an application. However, the plugins were extremely time critical, so I wanted to distribute them as C libraries. Now, these are not guaranteed to be safe (the ...
2
votes
1answer
48 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...
2
votes
2answers
1k views

What are the most common infection vectors for personal computers?

We have OWASP to tell us about common security vulnerabilities in webapps and such, but what are the most common infection vectors for personal computers? A few example vectors: Social engineering ...
2
votes
3answers
93 views

Simple methods of preventing infection from external drives

What are some simple methods of preventing my computer from being infected by USB drives and other storage devices? I'm not asking for any bullet-proof methods, just something that can prevent ...
1
vote
1answer
247 views

How does CryptoDefense ransomware encrypt large data with a (relatively) small RSA key?

I recently encountered some news about the recently new Ransomware called CryptoDefense: it uses RSA 2048 to encrypt your valuables and offers the private key for a price. (It's already been solved ...
1
vote
0answers
51 views

Enabling virutalization, addressing the bluepill risk?

Background to this question is the ambivalence I assume with virtualization. Also to start directly with clarity: the term bluepill should here be a placeholder to denote "malware that uses ...
1
vote
1answer
285 views

What does a Remote Desktop Connection risk for both computers?

I recently had a malware issue called "mysearchdial" that installed itself into my home computer's browser because someone didn't pay attention to what they were installing. I RDP'd into my work ...
1
vote
2answers
77 views

Verifying integrity of text files

While I was away from my home I needed to do some work on a java program so I booted a friends netbook(windows 8) I had with me and finished most of the works I needed to do there. Tho when I returned ...
3
votes
2answers
161 views

Can viewing an email message in Outlook 2013 install malware on my computer?

I routinely get spam messages which state "Your account for [Insert game here] has been flagged. If you don't click this link/send us this info/go to this website in the next 72 hours, your account ...
3
votes
1answer
116 views

Drive-by downloads

I am aware of the problem of drive-by downloads, which happens when one visits a malicious site and a malware is downloaded to the PC. I want to ask that when such a program is downloaded, how does it ...