Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

0
votes
2answers
62 views

Why does malware modify proxy settings?

During dynamic analysis, I have noticed that Adware and some Trojans modify the proxy settings within the Windows Registry. What is the purpose behind making this modification? The most common keys I ...
0
votes
1answer
211 views

Help me understand this adware (compute-1.amazonaws.com)

I ran TCPdump on my Macbook and saw a lot of communication going back and forth between 10.239.68.143 and compute-1.amazonaws.com. I looked up my private IP address with ifconfig and found that that ...
1
vote
3answers
80 views

Root access and malware

Would it help to defend against malware if I use a less privileged Windows 7 account for my day-to-day work?
0
votes
2answers
151 views

Can somebody explain what this obfuscated JS code received by email does? It fools AVG, MWB, Spybot, which all report it SAFE!

Below is the JS code. I would like to understand how it extracts the malware code, and what it does. I tried to Google parts of the original str, as well as convert it from hex to ASCII: (URR^ $ ...
2
votes
1answer
192 views

HTML iframe security exploit

Can somebody explain if there's something malicious in this HTML, The width and height of the iframe ares set to 1 and it's out of the view with top: -100px; statement. I believe it takes some some ...
3
votes
1answer
121 views

Android ransomware difficulties [closed]

My phone is a Samsung Galaxy S2. I have somehow gotten some ransomware that is displaying device information, including my name and recent contacts' data. The ransomware starts basically right away, ...
3
votes
0answers
38 views

“Segmented” malware

I've been researching how anti-malware tools function and I feel like I'm missing something with heuristic analysis. What I've learned so far Anti-malware programs can use heuristic analysis and ...
2
votes
0answers
100 views

How to scan large .bin files for malware?

I know about websites like VirusTotal, and programs like herdprotect. I'm using Avira and Superantispyware, but once the large bin files are scanned, usually nothing is found. But after running an ...
24
votes
2answers
5k views

Why is spreading malware.scr instead of malware.exe more common?

Both are binaries and I guess that AV products know that .scr files that are not screensavers should be dealt with with "special care". I see quite a lot of "Document.pdf.scr" malware samples and ...
1
vote
0answers
101 views

Is checking out network traffic for suspected malware useless if the malicious actor is in a different timezone? [closed]

I had recently upgraded from OS X 10.10 (Yosemite) to OS X 10.11 (El Capitan) from a bootable drive that the Genius Bar of one of the my city's Apple stores has, and I installed the 10.11.1 update ...
7
votes
3answers
904 views

How do virtual machines help security?

Can using a VM help to protect my passwords or other data? I'm asking this because I'm using a PC that others have access to, so there is possibly of some malware. I don't want to login to my web ...
10
votes
2answers
866 views

Effectiveness of flattening a PDF to remove malware

I'm currently looking at ways to prevent malicious PDF files at the network boundary. This will include virus scanning - but there are known limitations to that. I see a common approach is to flatten ...
98
votes
11answers
13k views

Is there any way to safely examine the contents of a USB memory stick?

Suppose I found a USB memory stick lying around, and wanted to examine its contents in an attempt to locate its rightful owner. Considering that USB sticks might actually be something altogether more ...
8
votes
1answer
117 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
2
votes
0answers
50 views

Open source firmware as mitigation against firmware persistent malware?

I am concerned about the threat of persistent malware entrenched in device firmware. I am not familiar with the intricacies of firmware security, so I am turning to SE for help. I recently learned of ...
3
votes
2answers
87 views

Disabling downloads in the browser; are there any benefits?

I was playing around with the security settings in my browser (IE) after being attacked by malware. I noticed an option to disable downloads. If I were to disable downloads, and re-enable them when ...
126
votes
5answers
16k views

How can USB sticks be dangerous?

We all know the story of the USB drive left outside a power plant which was found by a worker and inserted into a computer to see the contents which then allowed a hack to ensue. Here is my question, ...
2
votes
2answers
89 views

why would keyloggers be used for stealing money less often than banking malware?

I read Kaspersky statistic and I saw this image : Why would keyloggers be used for stealing money less often than banking malware?
3
votes
2answers
209 views

Why Antivirus Detects Simple Java Program as Trojan?

Just now I was testing a very simple code in java when I noticed a strange thing.......... On Compiling the program My antivirus detected it as trojan and deleted the jar file....... Further it is not ...
1
vote
2answers
181 views

Where should I start looking if an internet provider has notified me of malware? [closed]

I got an email earlier today from my internet service provider telling me there's some sort of malware on one of the ips in my home, and it had asked me to download some antivirus software. The ...
4
votes
4answers
165 views

Should I format storage after buying it?

I've just bought a new (unused) external HDD. Should I format it or is it save to use it directly? Did it already happen that a device was infected before the first customer use? Will formatting ...
17
votes
3answers
630 views

How Do Rootkits & Other Low-Level Malware Still Manage to Load on Systems Protected by Secure Boot (and TB/MB)?

Let me try asking my question this way... Let's say that I'm a offensive cyber Bad Guy working for a foreign state-sponsored Advanced Persistent Threat unit. My unit is charged with, say, stealing ...
1
vote
1answer
41 views

Techniques exclusive to my malicious version of my own benign program?

Do any special techniques become available to me when writing the malicious version of a program, when I myself am also the person programming the legitimate program? (Any measure I could take with ...
5
votes
2answers
190 views

Is it possible to infect an e-mail by accident?

Sometimes, my friends send me e-mails. I know that they don't care that much about computer security (while I care). I know that they don't know how to create an infected e-mail (no reason for doing ...
2
votes
2answers
87 views

xcodeghost infection in a byod device

We detected network traffic from a device infected with xcodeghost trying to reach a known bot command and control address. Obviously, we removed the device from the network. The user removed two ...
1
vote
1answer
68 views

Protecting users with browser extension. Is it possible, if the machine is already infected?

Assume a trojan acquired admin privilege on a Windows 7 machine. How easy is it for the trojan to replace/hijack/modify a browser extension without user knowing it? Is it possible? I am thinking of ...
5
votes
3answers
165 views

Best practice for home router configuration

Having read about the large number of routers infected by Wifatch, I've realised I don't know how to check whether my router has been infected with this or more malicious malware or what I'd do about ...
1
vote
1answer
214 views

Automatic redirection to another website

As soon as I open a webpage, I am redirected to another site. I have an antivirus on my PC, but it has not been able to do anything to stop this. I have reseted my browser settings (Chrome) and ...
3
votes
1answer
41 views

A single site for reporting unknown virii

I have just received an email with an unknown virus. I happily passed through my scanners. I have checked it's still unknown to all of 4 anti-viruses I have an access to. I have already reported it ...
1
vote
3answers
110 views

My Hacked(?) Wordpress Sites

Hi all I'm using a shared hosting and my hosting company is saying my sites have unwanted codes and in report: Your account had been used to attack our/other servers! Your account holds malicious ...
2
votes
2answers
104 views

How to find a process that is sending HTTP HEAD requests

When I was using fiddler for testing a web Client(capturing non-browser traffic only), it captured the below by coincidence. Is there any way that i can found out which process is doing this? I am on ...
6
votes
1answer
86 views

Methods to Monitor Ads For Malware on Mobile Devices

I've noticed that malware being introduced to a mobile application or web application through advertisements, unknown to the developer of the application, is becoming increasingly popular. I've been ...
2
votes
1answer
119 views

Someone is injecting malware into my website

My website was hacked last year and someone had uploaded a script which was hogging up all CPU and load avg went up to 30+ till our hosting provider temporally suspended the account, that was a few ...
2
votes
1answer
94 views

How Is It Possible That an App Connects to 0.0.0.142 IP Address? [closed]

I regularly review connections being established from apps in my phone to external services. Lately, I found Facebook connecting to 0.0.0.142. So I deleted Facebook for Android app. Now, I just found ...
2
votes
0answers
47 views

Novicorp WinToFlash Lite, spyware etc

I used Novicorp WinToFlash Lite on Windows 7 to create a Windows 10 bootable USB memory stick. While creating the USB drive, I noticed that WinToFlash wrote something like adding blahblah files to ...
0
votes
2answers
108 views

Media players (vlc, spotify and windows media player) don't work after a virus attack [closed]

I just got attacked by a couple of viruses while my laptop was completely unprotected. I installed the necessary programs and tried to get most of the symptoms to go away. I also think I deleted most ...
0
votes
1answer
946 views

PHP mallware attack [duplicate]

I'm desprate because my site has been attacked by some malware that adds code below on every php files. I tried to edit and chmod the infected file but its coming back. Scanning with ClamAV found ...
2
votes
2answers
239 views

Can a BIOS or UEFI infection transfer to other storage drives without the OS presence?

I am already aware that a BIOS or UEFI malware "activate" only in the OS environment. Is it possible though that a spread mechanism be activated without the presence of the OS, so that it would infect ...
2
votes
1answer
65 views

Thousands of files (png, pdf, tex, java, cpp, etc.) deleted on Mac OS X Yosemite

Yesterday, I noticed that, starting at 12:40, many thousands files had been automatically deleted from my drive. The computer is a Macbook Pro with a recent version of Mac OS X Yosemite. Since many ...
6
votes
1answer
60 views

Relationship between http time response and geo-location

I have a lot of pcap files about traffic generated by malware, this include vast kind of packets like TCP UDP and more important HTTP. Whereas is possible I have the geo-locations related to the IP ...
2
votes
1answer
52 views

apparmor alternative for MacBook [closed]

Does anyone know an alternative to apparmor for Mac? Every time I use winebottler my MacBook gets Windows viruses. Wanted to protect my Mac from it.
2
votes
4answers
134 views

Redirection Malware Infection

I have AVG Antivirus installed on my PC. My PC is infected with some kind of bonjovi redirection malware. It randomly opens up a new tab in Chrome and loads porn sites. I have had this infection in ...
2
votes
1answer
220 views

How does Cryptolocker propagate?

One of the computers in my office has been compromised by Cryptolocker. Once informed, my immediate response was to disconnect the computer from the network - though there was a period of a few hours ...
-3
votes
1answer
46 views

Virus that scans hard drive for utility bill + ID? [closed]

Is it possible a virus or malware could scan a hard drive to find ID documents etc and upload them? Randomly some old files were re-uploaded to Dropbox without any updates to them or modifications. ...
4
votes
2answers
237 views

Reaction to spam from acquaintance

It often happens that I receive an email like this: From: acquaintance@herbal-viagra.com To: me@domain.com Hi, me@domain.com -- Check this out: http://herbal-viagra.com -- ...
4
votes
2answers
277 views

Is this powershell script an infection?

While I was sitting in front of the computer not using it,my Windows 10 machine quickly flashed a few terminal windows, and then gave me a Windows Security popup, asking for my password. I have no ...
3
votes
1answer
67 views

How to verify .plist and .kext files are legitimate?

While scouring through tons of logs generated during an audit of a Mac filesystem after a potential malware infection, and I am wondering if there are any better ways to verify that all kernel ...
0
votes
2answers
167 views

Many suspicious requests are going from my browser whenever open any site

Whenever I open any site there are so many suspicious request are shown in my network panel of browser. I scan my system with many antiviruses too, but still facing the same issue. And sometimes I ...
4
votes
2answers
689 views

Malware (adware?) infection on linux

Recently I've get stuck with a malware(adware/virus ?) which I can't remove. here is the condition: I'm using Linux (Archlinux), it's uptodate and I don't install any packages outside standard repos ...
0
votes
2answers
139 views

Malicious favicon icon?

Is it possible for a favicon icon to be malicious so that you get the virus by just looking at the icon in the search results of a search engine like DuckDuckGo that displays the favicon icons for all ...