Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

4
votes
2answers
129 views

Can single-purpose PCs be useful as a security measure in this situation?

In the context of a small scale operation, we are considering use of single special purpose PCs allocated to single security-sensitive tasks - for example, certain financial operations. The intended ...
1
vote
2answers
534 views

How to find why so many host are talking to an IP which is blacklisted

In my SIEM tool, I got multiple alerts for communication with malware sites from Palo Alto firewall. I have seen many outbound communications from internal IPs toward IP: 74.217.31.51 having host name:...
0
votes
1answer
57 views

Test the security of my Linux setup [closed]

I have a Ubuntu installation running in VirtualBox. I have made a few modifications to it (some kernel modules and startup scripts) that I hope would make it very secure. Is there anyway I can test ...
1
vote
4answers
108 views

What are cookies and cache?

While surfing on the Internet, I am often afraid that I may have downloaded some malware program along with some files on my computer. Furthermore, I have been told that the reason for that are ...
-1
votes
2answers
87 views

Need tool to detect malware in several pdfs in Windows environment [closed]

I am looking for a Windows product that could detect malware in several pdfs in Windows environment. I don't want to use Python and I don't want to use Stream Dumpler. I am looking for something ...
0
votes
0answers
368 views

Tradeadexchange everywhere. On my mac, android and every browser

The tradeadexchange malware seems to have infected me in every possible way. It pops up new tabs whenever I am browsing on my Mac or Android devices, and also in any browser-Firefox/Chrome/.. ...
0
votes
1answer
73 views

Malicious .scr file partially executed: sohanad?

I executed a .scr file, (without prior checking of the file ending, because the filename was longer than what the explorer showed) and there was a popup saying something. Instant realization that I ...
0
votes
1answer
93 views

Dealing with a malware infected server

I have a web server which is heavily infected by malware. That is, around 12 websites (Outdated CMS) are infected by PHP shells and XSS. My websites are banned and are not accessible anymore. I have ...
45
votes
3answers
5k views

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

Assuming that I'm using a trusted USB flash drive (meaning that it's not some device that looks like a USB drive and whose purpose is to damage my PC), is it possible for my PC to get infected from ...
1
vote
4answers
510 views

iPad infected with virus (popup - admobinew.com)

This morning I was reading some news on some websites (I think one of them was haaretz.com) using my iPad (ios 9.0.1), I clicked on a news and I was redirected to some dodgy website and I started ...
1
vote
1answer
66 views

Access to email without antivirus [duplicate]

I am doing a test where we want to asses whether an email with a benign virus in it, exits a network. I need a means to receive the test emails I am sending from inside the network, without any ...
0
votes
1answer
106 views

Strange browsing problem, unknown images

When I open any site, I sometimes see unknown images replacing the original images on the website. They are not ads and can't be clicked. Just random images of people, cartoons etc. When I refresh ...
7
votes
2answers
267 views

Can malware infect more than one operating system?

Is is possible for malware to be written in a low-level language such as C or C++ and do the following: Infect a single operating systems(such as Windows) Detect other machines on the same network ...
0
votes
1answer
57 views

Why only Google warn us about attackers?

There are so many search engines like ask.com, yahoo.com and many more, but only Google warn us about attackers. Why so?
29
votes
3answers
3k views

Can malware be transmitted via a USB charger plugged into a wall socket?

I have a smart phone that I often plug into a wall socket for charging via a small adapter that rectifies the AC to DC power and transforms the voltage from line (120V or 240V) to 5 V DC, probably ...
30
votes
6answers
4k views

How safe are employee laptops in China against International corporate espionage?

I recently took a business trip to China. Our IT department told me I could not take my normal machine, and instead gave me a loaner. This loaner had MS Outlook and was linked to my normal company e-...
5
votes
3answers
380 views

How do professional hackers to test their own malwares/viruses without harming their own computer?

Yesterday I started some hacking tutorials on http://xeushack.com/tutorials/ by curiosity. I used the Android app to read the different articles about different ways of "hacking". The author clearly ...
0
votes
1answer
230 views

ISP has informed us that our server is launching brute force attacks on WordPress sites, how do we end this? [duplicate]

Misc Situation: -Server login is obtained by hacker, hacker places malicious brute force file in /hacked/bruteforce/ -Server password is then changed, hacker can still run script by navigating to ...
0
votes
2answers
162 views

Removing malware from a USB drive

Let's suppose I plugged in my UBS flash drive in my friends' PC and it got infected with malware. Is there a way I can wipe the USB drive without connecting it my or some other computer (and infecting ...
1
vote
1answer
563 views

ClamAV Flagging application .swf files as malware

ClamAV scans on our application servers are identifying some of our legitimate Flex .swf files as malicious, specifically citing CVE-2015-5548 (specifically, "Swf.Exploit.CVE_2015_5548 FOUND"). ...
0
votes
2answers
83 views

Why does malware modify proxy settings?

During dynamic analysis, I have noticed that Adware and some Trojans modify the proxy settings within the Windows Registry. What is the purpose behind making this modification? The most common keys I ...
0
votes
1answer
1k views

Help me understand this adware (compute-1.amazonaws.com)

I ran TCPdump on my Macbook and saw a lot of communication going back and forth between 10.239.68.143 and compute-1.amazonaws.com. I looked up my private IP address with ifconfig and found that that ...
1
vote
3answers
88 views

Root access and malware

Would it help to defend against malware if I use a less privileged Windows 7 account for my day-to-day work?
0
votes
2answers
241 views

Can somebody explain what this obfuscated JS code received by email does? It fools AVG, MWB, Spybot, which all report it SAFE!

Below is the JS code. I would like to understand how it extracts the malware code, and what it does. I tried to Google parts of the original str, as well as convert it from hex to ASCII: (URR^ $ ...
2
votes
1answer
765 views

HTML iframe security exploit

Can somebody explain if there's something malicious in this HTML, The width and height of the iframe ares set to 1 and it's out of the view with top: -100px; statement. I believe it takes some some ...
3
votes
1answer
159 views

Android ransomware difficulties [closed]

My phone is a Samsung Galaxy S2. I have somehow gotten some ransomware that is displaying device information, including my name and recent contacts' data. The ransomware starts basically right away, ...
5
votes
1answer
75 views

“Segmented” malware

I've been researching how anti-malware tools function and I feel like I'm missing something with heuristic analysis. What I've learned so far Anti-malware programs can use heuristic analysis and ...
2
votes
1answer
185 views

How to scan large .bin files for malware?

I know about websites like VirusTotal, and programs like herdprotect. I'm using Avira and Superantispyware, but once the large bin files are scanned, usually nothing is found. But after running an ...
24
votes
2answers
5k views

Why is spreading malware.scr instead of malware.exe more common?

Both are binaries and I guess that AV products know that .scr files that are not screensavers should be dealt with with "special care". I see quite a lot of "Document.pdf.scr" malware samples and can'...
1
vote
0answers
186 views

Is checking out network traffic for suspected malware useless if the malicious actor is in a different timezone? [closed]

I had recently upgraded from OS X 10.10 (Yosemite) to OS X 10.11 (El Capitan) from a bootable drive that the Genius Bar of one of the my city's Apple stores has, and I installed the 10.11.1 update ...
7
votes
3answers
951 views

How do virtual machines help security?

Can using a VM help to protect my passwords or other data? I'm asking this because I'm using a PC that others have access to, so there is possibly of some malware. I don't want to login to my web ...
10
votes
2answers
984 views

Effectiveness of flattening a PDF to remove malware

I'm currently looking at ways to prevent malicious PDF files at the network boundary. This will include virus scanning - but there are known limitations to that. I see a common approach is to flatten ...
101
votes
11answers
14k views

Is there any way to safely examine the contents of a USB memory stick?

Suppose I found a USB memory stick lying around, and wanted to examine its contents in an attempt to locate its rightful owner. Considering that USB sticks might actually be something altogether more ...
9
votes
1answer
124 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
2
votes
0answers
79 views

Open source firmware as mitigation against firmware persistent malware?

I am concerned about the threat of persistent malware entrenched in device firmware. I am not familiar with the intricacies of firmware security, so I am turning to SE for help. I recently learned of ...
2
votes
2answers
113 views

Disabling downloads in the browser; are there any benefits?

I was playing around with the security settings in my browser (IE) after being attacked by malware. I noticed an option to disable downloads. If I were to disable downloads, and re-enable them when ...
133
votes
5answers
16k views

How can USB sticks be dangerous?

We all know the story of the USB drive left outside a power plant which was found by a worker and inserted into a computer to see the contents which then allowed a hack to ensue. Here is my question, ...
1
vote
2answers
95 views

why would keyloggers be used for stealing money less often than banking malware?

I read Kaspersky statistic and I saw this image : Why would keyloggers be used for stealing money less often than banking malware?
3
votes
2answers
339 views

Why Antivirus Detects Simple Java Program as Trojan?

Just now I was testing a very simple code in java when I noticed a strange thing.......... On Compiling the program My antivirus detected it as trojan and deleted the jar file....... Further it is not ...
1
vote
2answers
339 views

Where should I start looking if an internet provider has notified me of malware? [closed]

I got an email earlier today from my internet service provider telling me there's some sort of malware on one of the ips in my home, and it had asked me to download some antivirus software. The ...
4
votes
4answers
182 views

Should I format storage after buying it?

I've just bought a new (unused) external HDD. Should I format it or is it save to use it directly? Did it already happen that a device was infected before the first customer use? Will formatting ...
20
votes
3answers
889 views

How Do Rootkits & Other Low-Level Malware Still Manage to Load on Systems Protected by Secure Boot (and TB/MB)?

Let me try asking my question this way... Let's say that I'm a offensive cyber Bad Guy working for a foreign state-sponsored Advanced Persistent Threat unit. My unit is charged with, say, stealing ...
1
vote
1answer
49 views

Techniques exclusive to my malicious version of my own benign program?

Do any special techniques become available to me when writing the malicious version of a program, when I myself am also the person programming the legitimate program? (Any measure I could take with ...
5
votes
2answers
255 views

Is it possible to infect an e-mail by accident?

Sometimes, my friends send me e-mails. I know that they don't care that much about computer security (while I care). I know that they don't know how to create an infected e-mail (no reason for doing ...
2
votes
2answers
95 views

xcodeghost infection in a byod device

We detected network traffic from a device infected with xcodeghost trying to reach a known bot command and control address. Obviously, we removed the device from the network. The user removed two ...
1
vote
1answer
73 views

Protecting users with browser extension. Is it possible, if the machine is already infected?

Assume a trojan acquired admin privilege on a Windows 7 machine. How easy is it for the trojan to replace/hijack/modify a browser extension without user knowing it? Is it possible? I am thinking of ...
5
votes
3answers
202 views

Best practice for home router configuration

Having read about the large number of routers infected by Wifatch, I've realised I don't know how to check whether my router has been infected with this or more malicious malware or what I'd do about ...
2
votes
2answers
320 views

Automatic redirection to another website

As soon as I open a webpage, I am redirected to another site. I have an antivirus on my PC, but it has not been able to do anything to stop this. I have reseted my browser settings (Chrome) and ...
3
votes
1answer
43 views

A single site for reporting unknown virii

I have just received an email with an unknown virus. I happily passed through my scanners. I have checked it's still unknown to all of 4 anti-viruses I have an access to. I have already reported it ...
1
vote
3answers
127 views

My Hacked(?) Wordpress Sites

Hi all I'm using a shared hosting and my hosting company is saying my sites have unwanted codes and in report: Your account had been used to attack our/other servers! Your account holds malicious ...