Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

0
votes
2answers
161 views

Filehosting - Malicious or not? [closed]

I see a lot of file hosting services like rapidshare, mediafire etc. But, I wonder if some of them are malicious or not. Rapidshare seems okay, but there are many (obscure) sites like the ones below ...
2
votes
4answers
406 views

How to identify the Java program that is maliciously accessing my web site from many client addresses?

For many years, my personal web site receives numerous pairs of hits that look like this, every day: 202.xx.xx.xx - - [22/Apr/2013:12:02:26 +0000] "GET / HTTP/1.1" 200 5923 "-" "Java/1.4.1_04" ...
7
votes
3answers
259 views

How can I circumvent the lack of Java updates?

Just imagine you have a bunch of computers which need Java for some important software and you can't just switch to another vendor because all are using Java in this field of technology. If you start ...
2
votes
1answer
928 views

how is BAT_VOBFUS (or similar) dangerous?

I was reading http://about-threats.trendmicro.com/malware.aspx?language=au&name=BAT_VOBFUS.SM earlier today after it turned up in a scan of a friends PC. I suppose I may be missing something vital ...
6
votes
4answers
519 views

How can Antivirus differentiate between a Trojan and a normal remote desktop application software?

RAT (Remote Access Tool, e.g. Sub7) are considered malicious by Antivirus software. How can it distinguish between such patches and a client application for commercial software like NetSupport ...
0
votes
4answers
136 views

multiple hash values in a single malware file

Can a malware file have multiple "Hash values"?
5
votes
1answer
115 views

Integrity check against package repository?

I have a Debian installed. When there are security updates, I review and install them as soon as possible and think about using automatic updates. From time to time I want to boot from a clean boot ...
4
votes
1answer
293 views

Exploited by newbie3viLc063s

My debian server got exploited by some scriptiekiddie who used Newbie3viLc063 http://pastebin.com/jma8JRG1 . Scriptkiddie uploaded logo_php.png to my server (My permissions sucked :s) and he did run ...
2
votes
2answers
128 views

Security Practices by Employees in a Corporate Environment

Consider the following situation : 1. Somehow my boss's system got infected with a malware ( He visited one of the Java exploits website). 2. He sends a PDF document containing the requirement ...
6
votes
3answers
2k views

Finding spam sending scripts?

What are the tips for finding email spam sending scripts? I ask because usually I hit a wall in shared hosting environments, so I ask this question as a way to get some insight from others. What I ...
-2
votes
1answer
1k views

Can't figure out how to get rid of Snap.do [closed]

Every time I start Chrome there is the Snap.do page that seems to be set as the homepage no matter how many times I've changed the homepage settings on Chrome and I've removed Snap.do from extensions ...
2
votes
2answers
189 views

Is interpreted malware easier to detect than compiled malware?

Is compiled code more of a security risk than interpreted code? I'm under the impression that it is due to the fact that compiled code can hide malicious code from malware scans.
-1
votes
1answer
99 views

how malware is added to android app [closed]

I'm working on securing apps from malware attack in project. I just want to know how app is repackaged with malware. Because for reverse engg. we've apktool, dex2jar, Java decompiler. But how ...
-2
votes
1answer
103 views

Why isn't AV software configured to recognize installed program vulnerabilities?

Background (not necessary to read): I've used a few different major AV programs day-to-day over the years, and not one has ever informed me I was running code with known vulnerabilities. Not only ...
8
votes
1answer
191 views

Is there a public database of mutex names that are associated with malware?

I remember seeing something like this a while back, and it'd be incredibly useful for a project I'm working on. Essentially there was a list of mutex names, with a list of malware identifiers (e.g. ...
11
votes
2answers
2k views

What does this injected code do?

One of my sites has just been hacked as this code has been inserted into random(?) files and places within the files. Does anyone understand what it is trying to do? I would welcome anything that may ...
-1
votes
2answers
171 views

Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]

Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
6
votes
4answers
548 views

Has my network/computer been breached?

I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes. A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
-1
votes
1answer
98 views

What websites do you visit for up to date Malware info? [closed]

I'm expanding my understanding of Malware a lot more, as it's currently 0! I know how it behaves and propagates most times, but I don't have a clue about the latest threats out there, what it ...
6
votes
6answers
1k views

Using linux to combat windows flash drive malware?

I just put an old flash drive which i used with a windows machine into my linux. I noticed many files, mostly exes which were never visible in windows (my windows does not hide hidden files and ...
9
votes
5answers
1k views

How do I safely inspect a suspicious email attachment?

I received a pretty blatantly spammy email to my Gmail account. I'm not really sure how it made it through the spam filters, since it has all of the telltale signs. The FROM field is spoofed as ...
3
votes
4answers
3k views

How can I detect backdoors?

I have a machine running Mac OS X and I suspect there may be a backdoor installed. I know that I could take it to a professional security firm for analysis, or nuke it from orbit, but I'm interested ...
2
votes
2answers
715 views

New Undetected Virus?

I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example: Before: Partition T:\ ...
1
vote
4answers
1k views

Can JavaScript be used to install malware?

Looking at the Pwn2Own contest got me thinking: http://arstechnica.com/security/2013/03/pwn2own-carnage-continues-as-exploits-take-down-adobe-reader-flash/?comments=1 If you have all plugins turned ...
0
votes
2answers
1k views

Infected usb flash drive detection and cleaning

Want to know what all type of malware infections are their that hides themselves in a pendrive completly and infects machine silently.How to detect this type of malware as they cannot be seen. How to ...
11
votes
2answers
460 views

Could once infected machine be ever trusted again?

I'm just about to switch to a new SSD drive, so I figured it's a good occasion for a really, really fresh start. I reconsidered every installed piece of software, uninstalled lots of crap ...
4
votes
1answer
2k views

Looking for URL Blacklists of Malicious Websites [closed]

Is there a maintained list of URLs that contain malicious content. These URLs may be involved in Phishing, Scams, Viri, or other Malware. Please indicate in your answer if the list is freely ...
4
votes
4answers
583 views

Site constantly getting infected

I am the webmaster of some websites running Typo3, 2 of which are getting infected constantly. These 2 sites are being owned by the same client. Something happens on those 2 sites that causes ...
0
votes
2answers
176 views

No where to run, no where to hide - suggestions to improve personal security needed

I think that as a windows user, I have no where to run and no where to hide. In the windows world no matter how many precautions I take, I can get infected by - 1 - Drive by on legal and popular ...
24
votes
3answers
2k views

Stack Overflow is www.doioig.gov/? If not, then could I be infected

Great! I made a post recently where I mentioned that my system might be infected. Now something new came up. When I search for Stack Overflow on Google, I see that the URL is www.doioig.gov/. When I ...
1
vote
3answers
375 views

How to Detect Zimbra Sniffing Trojan

I am a sys admin of our system, we are running zimbra as email server in our environment. I got the following message from the CEO. "Everytime I send or receive an email - I get a SPAM ads a few ...
0
votes
2answers
1k views

Regedit shows strange chinese characters in my system - should I be worried?

I suspect that my system has been hacked into. I see huge drops in free hard disk space for a while and then the space returns to near old values. A few days ago, when i clicked 'my computer', i saw ...
1
vote
1answer
160 views

Compromised server with psyBNC - what are our next steps?

One of our VPS servers has an install of psybnc on it. The install has been present for quite some time, and has now been brought to our attention. We have backups, but they also have psybnc on them. ...
1
vote
2answers
741 views

How to Secure My DropBox Installation?

I am sharing a DropBox Folder with by Friends for a project so that we can be updated with each other progress. But i was not very convince after reading the How secure is Dropbox?. What if one of my ...
4
votes
2answers
2k views

Need advice on linux server being hacked

I'm currently trying to find out how one of our centos servers was compromised. We were experiencing malware on our sites. After searching I finally found the malware injecting into the sites. As it ...
-1
votes
2answers
208 views

Is it possible to detect infection in PSP Go game console?

My PSP is acting like it could possibly be infected. It is locking up and then turns off during game play. There are also problems during games that could be related. This is a replacement PSP ...
0
votes
2answers
171 views

How isolated are 2 operating systems on 1 harddisk?

Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they? I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
3
votes
4answers
574 views

Strange android app … possibly a mass malware?

I started receiving on my android Samsung Galaxy note strange notifications in Mandarin (the language of the people of china). Once I click on the notification it opens my browser with a blank page ...
3
votes
2answers
256 views

How content-type:image can lead to infected JAR file?

Symantec published a news about a malvertising campaign targeting IE users with Java exploits (already known vulnerabilities). At some point they explain that the users are redirected on malicious ...
1
vote
4answers
918 views

My website has been hacked, what do i do next? [closed]

So. I couldn't see any other question like this on Sec.Se so i thought i'd ask. My public website www.foo.com has been hacked. The front page is sending it to be redirected to seoblog.fooblog.com in ...
16
votes
6answers
577 views

How to deal with a person who gets easily fooled by internet and mail scams?

alternative title: How to deal with a person who has gotten paranoid and doesn't want to go online anymore? A person, who has over the years been scammed many times, by bad spam/fraud emails, and ...
21
votes
6answers
1k views

Why are vulnerabilities and lack of security possible in computers?

I have heard about computer vulnerabilities, virus, malware, etc. Why are these threats possible? Why doesn't the computer just do the things it is supposed to? Why do some people write malware, ...
8
votes
1answer
754 views

How to study the packets sent by a keylogger

One of my friends runescape account got hacked through key-logger. He downloaded a runescape gold generator from a file sharing site and tried to use it. I have a strong doubt that it is a key-logger. ...
4
votes
4answers
1k views

Is online banking more secure on iOS than a desktop computer?

Does Apple's iOS provide a more secure environment for online commerce (banking or shopping) than Windows or Mac OS X? Since the only software that can run on iOS must be vetted by Apple, the ...
20
votes
6answers
2k views

Best practices for handling computer viruses

I realize this question may be quite broad (and hopefully not a violation of the FAQs), but I'm interested in hearing how many of you handle a computer infected with Malware. In a small-to-medium ...
3
votes
3answers
1k views

Malware infections from visiting or using YouTube

Is it possible to be infected by viruses or other malware while visiting YouTube? What kind of measures do the YouTube staff take to prevent viruses and malware?
1
vote
1answer
3k views

Android apk malware

I was browsing some website last night and that website suddenly sent me an apk called 'browser_update_install.apk', DrWeb light detect it and was able to delete it. My question here is about the apk ...
5
votes
4answers
600 views

Can malware hide their network activity from Resource Monitor (perfmon)?

Is it possible for malware to hide their network activity from tools like the Resource Monitor that ships with windows? How much effort is it for a malware developer to implement such functionality? ...
3
votes
2answers
139 views

DPAPI and malware

I'm considering using the Windows DPAPI to protect an ECDH key I use to encrypt some data in a local database in a Windows desktop application. I'm new to DPAPI, but its my understanding that DPAPI ...
2
votes
4answers
820 views

Sucuri giving false positive with their free online scanner because of an .htaccess RewriteRule

I'm not sure where to ask this Question - here, SO, Webmasters.SE, somewhere else? Please migrate if appropriate. tl;dr: The following rule in my .htaccess is causing Sucuri's free online scanner to ...