Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

0
votes
3answers
898 views

How to search for evidence of Camfecting (webcam hacking)?

I'm worried about camfecting (webcam hacking). The camera light on my mac (running OSX) is not on, but it isn't hard wired so that doesn't say a lot. I've ran a virus scan but no signs. Now my idea ...
0
votes
1answer
134 views

Virus (or Trojan) in Android

Definition of virus is (from Wikipedia): A computer virus is a malware program that, when executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data ...
5
votes
2answers
109 views

Are malware detection rulesets publicly discoverable?

I am uncertain about how public malware detection rulesets are? By a "ruleset" I mean the rules, usually written in Yara, that malware detection engines use to determine whether a file or memory ...
-2
votes
1answer
111 views

Interesting security demos for beginners [closed]

I am thinking about a creating short security demo to get people interested in the security topic. I've had a couple of ideas just want to see if anyone has anything else interesting. Edit: I was ...
0
votes
1answer
59 views

How do I secure X server against spyware in a GUI application?

Suppose you have a GUI application, that potentionally may be too curious about your environment, such as the list of window titles. How do I limit application's ability to enumerate windows, capture ...
3
votes
2answers
128 views

How to get rid of an Ad bot?

The issue started due to setting up a proxy server on a PC connected to my network. I then realized that all of my devices that connected to the network, including PCs and phones, are all infected by ...
0
votes
1answer
65 views

Virtual Penetration Test Lab - Figuring Out Its Market Size

Is there any reliable data available based on which the Global Market Size of Virtual Pen Testing Labs ( or Cyber Ranges ) can be ascertained ? If NOT , is it possible to calculate it ?
-1
votes
1answer
210 views

Hacking Gmail with 92 Percent Success - Does popular GUI framework designs reveal UI state change ?

The media has been claiming for the last 2 days that GMail can be hacked . http://www.cnet.com/news/researchers-find-way-to-hack-gmail-with-92-percent-success-rate/ They have based their ...
0
votes
1answer
104 views

Sandbox environment for “php malware” analysis [closed]

I would like to know how can I analyse an obfuscated malware php code ? I heard about cuckoo sandbox, but it seems too overwhelming for this particular task. So I decided to run a Vagrant box, install ...
1
vote
2answers
164 views

Attacker able to install screen capturing software in Windows 7 guest account

I am operating in a guest account of Windows 7. Could an attacker that got onto my PC through malware I installed, install a video program that records everything I do and send the result back to his ...
1
vote
1answer
69 views

Is this behavior the result of malware?

I have setup a new set of servers to test a software in Amazon EC2, and had set up my application. I've given it public access and a DNS entry, so its easily reachable by those that need to test it ...
5
votes
5answers
2k views

Is it possible for a phone to be transmitting even while turned off and the battery removed?

Is it technically or theoretically possible for any part of a mobile phone's circuitry to be still on and transmitting even while turned off and the battery has been removed? If so, how? I am ...
2
votes
1answer
190 views

I need help identifying the cause of weird outbound traffic from my network

I have some weird traffic heading outbound from my network. It is being blocked by the firewall from exiting and I'm not sure what the source is. I've looked at the machine and don't see anything ...
2
votes
5answers
2k views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
11
votes
2answers
2k views

Where do I find JavaScript malware?

I am looking for JavaScript malware. I need it just for local tests on my computer for a project I am working on. Are there any Internet resources where I could find this?
0
votes
2answers
7k views

Sophos virus protection continuously blocking codegv.ru

While using google chrome I keep getting a pop-up from Sophos saying "High Risk Website Blocked - Access has been blocked to "codegv.ru" It happens every time I perform any action in google chrome. ...
1
vote
4answers
188 views

If malware was detected in browser local storage does computer need to be nuked from orbit

I haven't used Windows partition since mid-June and I booted the system once again just a few days ago. My first action was as usual update all programs marked to be updated (including Windows ...
0
votes
2answers
2k views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?
1
vote
2answers
88 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
1
vote
1answer
54 views

The threat of video metadata

There are various old questions on stack exchange which say that malicious code in file metadata can potentially be executed when the file is opened (here, here, and here for example). They are all ...
-2
votes
1answer
97 views

Unrecognizable Icon. Virus?

Sorry I'm not sure this would be the best place but I've noticed this icon recently. I'm not sure what it is and it only pops up sometimes. When it does, I can't click it or do anything to it and it ...
2
votes
2answers
586 views

Antivirus settings: delete or quarantine the file?

I understand that most antiviruses by default quarantine infected files. I have changed it to remove all infected files immediately. Would this cause more harm than good?
30
votes
6answers
4k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...
3
votes
2answers
273 views

Can the USB standard be altered to prevent the “firmware attack”? [duplicate]

Wired, and others are reporting on a research paper by Karsten Nohl and Jakob Lell. The paper apparently shows how any USB device (not just memory sticks) can be infected with malware at the firmware ...
-1
votes
1answer
100 views

Problem in downloading and browsing [closed]

My downloads stop completing and some page in the browser appearing blank or with text only without css or js and so on, some program after complete return me a message when trying to start ...
1
vote
3answers
1k views

Is JavaScript malware as dangerous as native viruses? [closed]

Can JavaScript malware be as dangerous and damaging as more traditional viruses that are programmed mostly in native APIs?
4
votes
2answers
2k views

Could a malicious JS file pointed on URL/URI attack the browser/computer?

I found some website blacklisted on Google. I mean when you try to visit them, you get something like shown on this picture: After a small search, I found that some of them have a malicious ...
0
votes
2answers
174 views

How exactly does this Flash malware function on Ubuntu?

In this video, an experienced Ubuntu user manages to infect his system with some sort of malware. This is the first example I've ever seen of truly successful malware in the wild aside from privilege ...
2
votes
3answers
4k views

Can a PDF file contain a virus?

Could a PDF file contain any type of malwares ?
1
vote
2answers
137 views

Do multiplatform viruses exist? [closed]

Is there any known virus that targets the main operating systems: Windows, Linux and Mac OS X?
2
votes
1answer
50 views

When does it make sense to whitelist some subdomains but not others for a given domain?

Little Snitch has been useful to get a better handle on all the connections my computer tries to make. It's main dialog to allow or deny connections allows customizing (e.g. require specific port, or ...
0
votes
1answer
54 views

Questions about common exploits

I'm investigating the state of my MacBook Pro which I know was compromised, and do not know if I removed the exploits completely (and I realize, technically will never know this). I'm trying to hone ...
0
votes
1answer
264 views

Ubuntu 12.04 server attacked using Wordpress vulnerability (plugin?) [duplicate]

Env Rackspace cloud server Wordpress 3.9.1 Ubuntu 12.04 Linux web.mydomain.com 3.2.0-67-virtual #101-Ubuntu SMP Tue Jul 15 17:58:37 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux History These may ...
27
votes
6answers
5k views

How can normal files hide a virus?

How can normal files supported in the Windows operating system hide a virus? Sometimes opening a .txt , .jpg or .docx files leads to running a virus. How is this possible?
0
votes
3answers
165 views

Has personal computing security gotten better or worse in recent years? [closed]

I have a lot of experience with software as a developer, and am trying to move from newbie to more informed about present-day security. Everything I uncover makes me feel that personal computers have ...
0
votes
3answers
114 views

is it possible to upload infected pictures to a website?

I have a small website on which users can upload several types of files: images, zip files ... (except .exe files). Suppose a user uploads via the front end interface of my website a picture which is ...
1
vote
3answers
1k views

How to tell if my laptop is being spied on

I've been trying to determine if there is malware on my OS X 10.9.3 Mac, that is could be doing keylogging or other forms of non-destructive intrusion. Given the (not technically based) suspicion I ...
1
vote
2answers
153 views

Identifying suspicious encrypted traffic [duplicate]

Firstly, I welcome a better title for this question. I admit I'm a security novice. I'm trying to determine whether I have malware and what that malware may be doing. Using Wireshark, I see several ...
3
votes
3answers
784 views

Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?

Preferably with a vanilla Linux kernel i.e. not using SELinux or GrSecurity? Lately there has been a case of in-the-wild UNIX server malware: ...
4
votes
1answer
111 views

How does malware hooks ASEPs?

What are the operations made by malware to hook the auto start extensibility points in order to be able to run at the startup of the computer that runs Windows operation system ?
1
vote
1answer
79 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
4
votes
1answer
162 views

Why run ondemand scanners in failsafe mode when the virus could have encrypted itself?

The internet is full of guides of how to remove malware on already infected computers. Normally, step 1 is to enter failsafe mode, so that the virus can't interfere with the anti-virus program that ...
0
votes
0answers
102 views

Which system files are targeted by malware on Windows XP?

On Windows XP, what are the main system files and DLL files are targeted by malware ? I need this information in order to make a hash of those files and check if my system will be compromised in the ...
1
vote
2answers
212 views

Is monitoring registry hives enough to detect new malware installation?

Is checking the state of the supporting files of the Windows registry hives enough to detect if a new software/malware has been installed on the computer or a given Windows regsitry key has been ...
2
votes
1answer
154 views

Skype is doing funny things when I type or click, does this necessarily mean malware may be in my computer?

I'm new to the IT Security Stack Exchange! This is my question: I've Skype installed on my Windows 7 computer. In the last few months I've noticed my mouse cursor blinks (I mean it shows that cursor ...
35
votes
4answers
13k views

Should I get an antivirus for Ubuntu?

Considering the recent thread regarding anti-virus for the Mac I wonder how many of the arguments put forth are relevant today to Linux systems, specifically Ubuntu. There are no known Ubuntu ...
1
vote
3answers
98 views

Are dialers obsolete?

My antivirus picked up an infection by Dialer/Coulomb. The definition of a dialer is a piece of malware that dials a number that charges money. How would it do this, is this from when modems were ...
0
votes
1answer
45 views

What parameters to check to say that a computer running Windows is slow in responding because of infection?

When interaction between the user and the operating system is too slow (Windows become slow in responding to different user's request): what parameters could we check (and that we could use within a ...
1
vote
1answer
43 views

What are the webmalware effects on Windows XP?

I am redirecting URLs to a virtual machine (Windows operating system) to check if there is malware on the website i want to visit (JavaScript attacks, drive-by download attacks, infected pictures/PDF ...
1
vote
1answer
141 views

Why do sandboxing environments not rely on antivirus programs?

Since years ago, miscreants use JavaScript to craft web malware attacks such as drive-by download attack that is used for example to install the famous CoolWebSearch virus. There are static methods ...