Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

1
vote
2answers
1k views

How do I figure out how malware infected my server, and the subsequent sites on the server?

I recently was in charge of fixing our server at work, and cleaning the sites on it. We were infected with some malware that injected some code into some of our clients websites. Apparently, there was ...
0
votes
2answers
74 views

Course of action with this malware [duplicate]

After clicking in a fake "download here" button in a webpage for film downloads, a computer has got infected with what I believe to be an adware. I have located the file, VirusTotal gives this ...
0
votes
2answers
309 views

Transmitting malicious code over audio speakers

In a post that reads like science-fiction, a security researcher claims that malicious code was being passed between computers. A few quotes: ... "badBIOS," as Ruiu dubbed the malware, has the ...
0
votes
1answer
535 views

Why aren't sophisticated Malware written with .NET [closed]

I've been trying to research malware techniques lately, as malware analysis intrigues me. I've got a pretty heavy background in .NET, and based on my 7+ years in .NET, I feel that I could write a ...
0
votes
2answers
164 views

Filehosting - Malicious or not? [closed]

I see a lot of file hosting services like rapidshare, mediafire etc. But, I wonder if some of them are malicious or not. Rapidshare seems okay, but there are many (obscure) sites like the ones below ...
0
votes
3answers
218 views

Using a VM to access internet when malware blocks internet access?

My computer was recently infected by some malware which had blocked internet access. I had a virtualization software with an OS in it. Surprisingly, I could access the internet from the VM. I know ...
0
votes
2answers
172 views

How isolated are 2 operating systems on 1 harddisk?

Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they? I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
0
votes
2answers
162 views

NGO Joomla! site: Infected with malware? JavaScript injection?

Please help us with this NGO site running Joomla! 1.5. They can't pay a security professional right now, so maybe you guys can help isolate the problem? If you go to http://casatrespatios.org you ...
0
votes
2answers
158 views

Random File downloaded

Okay so I was setting up stuff on my new mac earlier, downloading flash and office. They both downloaded and installed smoothly, but after I noticed a weird new file in my 'downloads' folder: ...
0
votes
1answer
99 views

How does duqu implement its dll files in PNF file format?

As you know files with PNF extension are associated with bitmap file type, from technically point of view how did authors of duqu implement this? as I concluded it is possible to make dlls in any ...
0
votes
1answer
254 views

Potential problem in public Maven repository

Problem This morning I found that, what I thought was one of our proprietary artifacts, had been published to a public repository: http://repo.grails.org/grails/simple/codehaus-cache/com/ If you ...
0
votes
2answers
100 views

VM security, how to access main OS

Is there any way for me to access the main computer if the VM has been infected? Let's say that I am running Debian or ubuntu in a VM and the main computer uses Windows (or other way around just so ...
0
votes
2answers
1k views

Infected usb flash drive detection and cleaning

Want to know what all type of malware infections are their that hides themselves in a pendrive completly and infects machine silently.How to detect this type of malware as they cannot be seen. How to ...
0
votes
1answer
319 views

How securely use Firefox Add-on to prevent steal data?

Some videos on YouTube demonstrate how a Firefox extension can collect login information used to login to websites such as Facebook. After installing this tool/malware as Firefox Add-on, I observed ...
0
votes
2answers
72 views

Can malware cause firefox to send GET requests?

Is it possible for a site to host malware such that if a certain page is accessed, Firefox is made to send additional GET requests? I'm seeing traffic for attacks coming from me that I haven't done. ...
0
votes
3answers
89 views

What are the pros and cons of using live CDs vs VMs for malware analysis?

I'm planning on doing some malware research for a research project, and I was wondering what would be a better option for keeping my system safe from viruses accidentally infecting it. I'm only ...
0
votes
1answer
52 views

How to prevent malware to know when removable devices are plugged in

The question is clear, I'm a programmer and wrote a software to disinfect the USB devices when they got the malware which hides the files and creates a shortcut of the virus . Using this soft we can ...
0
votes
3answers
507 views

Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7

Is it possible to protect Windows like Linux? I mean, I have Ubuntu installed on my laptop and when some program wants to install something etc. the pop up shows up and I need to type the password. ...
0
votes
3answers
2k views

Malware Suddenly Uploaded To My Website! [duplicate]

This is my first question here on the IT Security section of Stack Exchange, so if there is any problems with my question I apologize. Basics Suddenly Google says that my website contains Malware! ...
0
votes
2answers
1k views

Stopping js malware injection on our Wordpress site

This had been added to our wordpress site, specifically in the footer.php. hxxp://pkktjuchlrv.peguards.cc/02b31ac5iq/get.js It is malware as defined by google, i belive it is tracking code. We have ...
0
votes
2answers
1k views

Regedit shows strange chinese characters in my system - should I be worried?

I suspect that my system has been hacked into. I see huge drops in free hard disk space for a while and then the space returns to near old values. A few days ago, when i clicked 'my computer', i saw ...
0
votes
1answer
254 views

What is the purpose of this malware code?

This is the code that I found on my client's website: ?><noindex><nofollow> <iframe src="htxp://atluscomdnsup23.ikwb.cxm/main.php?page=1f1214ff37a3022d" height="0" width="0" ...
0
votes
1answer
3k views

In Metasploit, how to use a custom exe as payload?

Question was once on a mailing list but wasn't answered. I want to use a custom exe as a payload in metasploit. For example when I use exploit/multi/browser/java_atomicreferencearray and want to ...
0
votes
2answers
115 views

Is anti virus software supposed to clean up registry entries made by malware?

I just cleaned up a virus infection on my computer (running windows) by running an Anti Virus Scan. The malicious executable files are now deleted. However, the registry entries made by it remain. ...
0
votes
3answers
581 views

How to check if computer is controlled remotely

My laptop has windows 7 installed. One Saturday night I couldn't fall asleep and was just lying in bed. Then suddenly at around 2 in the morning I heard the fan of the laptop start up and lights on ...
0
votes
1answer
94 views

Strange Virus Infecting My Server

I am currently working on a Web App on my dedicated server (LAMP) and it seems like it might be infected with some strange malware/virus of some kind. When I access some domains on that server (every ...
0
votes
1answer
136 views

Malware hidden on a USB drive, does the malware always need to run to hide itself? [duplicate]

Would malware be able to hide itself in the controller somehow or otherwise be able to effectively hide files itself from both windows and Linux?
0
votes
1answer
124 views

Is “Small HTTP server” malware?

I have used Small HTTP server in the past, years ago. I went to its website do download it again, but it has a dubious WOT rating: some say it is malware, some say it isn't. I proceeded to check it ...
0
votes
1answer
119 views

What vulnerabilities does a malware exploit? [closed]

I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. ...
0
votes
3answers
761 views

How to find vulnerable sites on a web server

A client of mine has a managed VPS with dozens of websites on it, maybe even hundreds. Now his server keeps getting infected on a regular basis. The webhost / server admins keep digging in the dark. ...
0
votes
1answer
218 views

What does it mean by the 'Hash of a malware'?

I have just recently started to delve into the topics of malware. In my hunt for malware binaries, I came across certain responses that it is not easy to grab binaries based on malware names like ...
0
votes
2answers
176 views

No where to run, no where to hide - suggestions to improve personal security needed

I think that as a windows user, I have no where to run and no where to hide. In the windows world no matter how many precautions I take, I can get infected by - 1 - Drive by on legal and popular ...
0
votes
1answer
273 views

Can the FiddlerCore library be used for Malware (e.g. MitM attacks)?

I've used the excellent Fiddler web debugging software before and have recently come across the Fiddler Core headless .NET library which gives you all the abilities of Fiddler in library form. It's ...
0
votes
2answers
94 views

Should a host based firewall have an API accessible to other applications?

Some people are hesitant to use Windows Firewall because it allows software to alter its state via an API. The benefit of this is that the Firewall configuration can be centrally manged in GPO. On ...
0
votes
1answer
103 views

Changing malware trends in VM

I recently came (Dunno, since when it was happening) to know that malwares can detect if they are running inside a VM like Vmware, and thus can change their behaviour. So my question is how the ...
0
votes
3answers
485 views

DNS queries with hex string that is a SHA1 of a domain name! Is it a malware?

My computer does a lot of queries to strange domains such as: 56cea5c2b408989ab067adcb787d0f99209bbe07.mydomain.com The strange thing is that 56cea5c2b408989ab067adcb787d0f99209bbe07 is the SHA1 of ...
0
votes
2answers
16 views

JS malware detection

Is there a way to detect a malicious JavaScript code within a webpage before the script runs on my computer ? I want to develop a Python script that prevents from 8 JS malwares that I can embed on my ...
0
votes
1answer
41 views

Repercussions of hacked router?

I am staying in Thailand right now on a "long holiday" to do some work on my laptop. A few weeks I noticed that at the condo where I am staying, sometimes I am redirected to ad sites. I researched it ...
0
votes
2answers
80 views

Why does host's antivirus detect guest's malware?

I'm analyzing some malicious files on a VM and I'm noticing that every time I open a file, the host's antivirus detects it. Why does this happen? Is the malicious content escaping to the host?
0
votes
3answers
134 views

Malware stole an executable file on my computer? Seems unlikely

If you don't want to read all of the details, skip to the bottom; I'll make a summary. I created a computer program as a proof of concept (I threw it together in 12 hours, so I wrote it in Visual ...
0
votes
1answer
46 views

How can I view the contents of a web page without running malicious code? [closed]

I received a strange email which has some strange URL in it. I would like to know what is "behind" the url, but without the risk of running anything malicious. How can see the contents of the URL, ...
0
votes
2answers
137 views

Getting detailed information about an infected website

I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the ...
0
votes
1answer
86 views

Can signature-based Antivirus detect encrypted malware? [duplicate]

How effective signature-based Antivirus is, in detecting encrypted malware?
0
votes
1answer
37 views

Photo Attachment's Feature For Some Mail Servers [duplicate]

You already know google started new service which is related to gmail. http://gmailblog.blogspot.com/2013/11/attachments-in-gmail-now-with-power-of.html When we send new mail to friends.If it ...
0
votes
1answer
107 views

someone claims to have created such a malware, can he be true?

These are not my lines they are by someone else on the internet. I also want to know is that malware that unique? How will it work in GPU and is there a way to sandbox such application? "HERE GOES ...
0
votes
1answer
100 views

What is “KDV” in antivirus databases?

I scanned a file (virus) on VirusTotal and 3-5 antivirus labelled it as Generic.KDV.549626 Is there any central "KDV" database where all the entries related to a virus are stored?
0
votes
1answer
205 views

Remote Administration Tools and firewalls

I was faced with a question a few days ago, regarding how a RAT server can reach out through the firewall and connect to the client. This was something that I've never given any thought to before, so ...
0
votes
4answers
137 views

multiple hash values in a single malware file

Can a malware file have multiple "Hash values"?
0
votes
2answers
561 views

Is a VPN the only way to protect against rogue Wifi access points MITM attacks?

Given that it's very easy set up a rogue access point and MITM that connection, is a VPN to a trusted host the only real way to secure my browsing and other TCP/UDP actions? This question relates to ...
0
votes
1answer
51 views

File directory deletion [closed]

So I heard this guy talkin about how one time he deleted someone's windows directory remotely. He claimed to have gotten into the system and deleted it such that the files are all still there, but the ...