Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

6
votes
2answers
3k views

Exactly how secure is VM browsing?

I generally do all of my web browsing in a VM. I have one "safe" VM running Ubuntu that has guest services installed. I generally only go to sites I deem are trustworthy here. I also have an "unsafe" ...
7
votes
2answers
9k views

Can Keyloggers get passwords from Windows 7/8 Logon Screen?

If yes, do you know some examples of Keyloggers capable of perform this? EDIT: I mean when logon in the windows right after power on the PC and/or when locked with Win+L.
2
votes
4answers
815 views

How would a keylogger bypass Wireshark sniffing?

I often see malicious keyloggers being advertised as having anit-wireshark feature. Meaning their data can't be sniffed. Is it possible to do so? How would they do it? My guess is that they just ...
0
votes
1answer
445 views

My cookies have been stolen. What to do?

About a month and a half ago I got infected by a virus called MSIL.Bladabindi. I noticed the virus quite soon because google notified me that someone from Turkey tried to access my account (I'm in ...
5
votes
2answers
267 views

Average time before a malware gets detected in the world

I am actually working on a scolar presentation about Careto malware. I was really impressed by the time it took to discover it (at least 6 years, according to some compilation stamps), so to improve ...
1
vote
1answer
128 views

Android's Encryption mechanism

Well, according to my Android smartphone, it says the phone has been encrypted. Should I be worried if it has a malware or if I get hacked because I once clicked a link on a certain website then I ...
0
votes
1answer
111 views

Valuable languages for working malwares

I would like a recommendation for programming languages which will be valuable when dealing with malware. I learn to code on C not on expert level(thanks god I didn't). But C doesn't seems so popular ...
0
votes
1answer
906 views

How is the new “Dyer” malware bypassing SSL?

Apparently the new Dyer malware is bypassing SSL to swipe bank credentials. I read that it's using "process hooks" to hook the browsers and see the data BEFORE it is encrypted and sent to the bank ...
11
votes
3answers
840 views

Retrieve files from possibly infected USB

I work in a lab environment, and save data to a shared PC. This PC is not networked, and so the only way to get the data from that PC to my own, is through USB. The lab director has mentioned that the ...
1
vote
2answers
281 views

Repercussions of hacked router?

I am staying in Thailand right now on a "long holiday" to do some work on my laptop. A few weeks I noticed that at the condo where I am staying, sometimes I am redirected to ad sites. I researched it ...
1
vote
1answer
609 views

Are my Snort rules correct?

I am trying to do a Snort demo and I though it would be nice to detect a real threat. I picked the sasser worm and the jolt/teardrop dos attacks for the demo; no particular reason. Out of the three ...
-1
votes
1answer
2k views

My command prompt opens itself periodically and closes itself immediately afterwards. It either displays nothing or displays this message: [closed]

[1] The command prompt also sometimes opens itself and then stays open until I close it. I have run MalwareBytes and SuperAntiSpyware and they find nothing. This is my hijack this log file. I don't ...
4
votes
4answers
2k views

Is online banking more secure on iOS than a desktop computer?

Does Apple's iOS provide a more secure environment for online commerce (banking or shopping) than Windows or Mac OS X? Since the only software that can run on iOS must be vetted by Apple, the ...
2
votes
1answer
294 views

Is winmail.dat a malware propagation vector?

Some of my coworkers use Microsoft Outlook (I believe) and have it configured in such a way that mail attachments are encapsulated in winmail.dat files. Apart from the general annoyance and lack of ...
0
votes
1answer
593 views

Can malware be activated by previewing email in Outlook's Preview pane?

It is common advice to not open suspicious email in order to avoid being infected by malware contained in the email. What constitutes opening an email in Outlook? Specifically, is viewing an email in ...
1
vote
3answers
254 views

Next steps to get rid of malware? [duplicate]

My father in law just had a problem,He clicked on a link in an email (he was using gmail on the version 35.0.1916.114m of Chrome), and suddenly the computer sort of went black, and possibly something ...
0
votes
2answers
65 views

Posting links to executable files and security

If someone is able to post on the forum of my website links to executable files (malware) hosted on remote websites: can we say that my website suffers from a security hole ?
1
vote
2answers
89 views

Can a drive-by download attack crash the OS?

Are there cases where a serious drive-by download attack could crash the operating system or the browser ?
1
vote
2answers
122 views

Question about “FUDing” with hex editor

I see a lot of materials in Internet about this technique. I'm not really interested in malwares, but I'm curious when you change bytes to an exe with other bytes, wouldn't this corrupt the exe? I can ...
1
vote
1answer
122 views

SpyProxy: how does it work?

I have been reading about SpyProxy. Can someone explain me this phrase I found in the article ? Here it is: We monitor the guest OS and browser through “triggers” installed to look for sandbox ...
-2
votes
1answer
156 views

How do i defeat cell phone spyware? [closed]

I've bought a new phone, where one of its products can be activated by receiving a phone call. If someone uses a spoofed SIM card - with a number I recognize - I'll likely answer the call. Are there ...
14
votes
3answers
2k views

Can a guest virtual machine be compromised by a virus on the host machine?

All questions ask about the other way round, ie. can a virtual machine compromise the host. But I'm asking can a virus on the host machine compromise the guest virtual machine?
0
votes
2answers
79 views

Which mechanism did Flame use to avoid being identified?

I got a question that says "What is the major difference in the USB propagation system used by Flame with regard to Stuxnet to prevent being identified?". After Googling for a while, I haven't found ...
-1
votes
1answer
593 views

How can we find out the fully undetectable virus and kill it in our computer? [duplicate]

As I know, most hacker can crypt the virus to bypass all antivirus. Even famous antivirus like kaspersky and avast doesn't know it. So, is there a good way to find out the FUD virus and protect from ...
0
votes
1answer
50 views

process/program execution anomalies

How could I know if a given program is malicious by checking its CPU occupation, RAM consumption, network connexions, registry entries ... etc ? Maybe an other way to ask this question is: when could ...
0
votes
2answers
220 views

Do drive by download attacks include malicious file downloading?

I read every where that drive by download attack consists in downloading malware to the victim's PC and execute it without the victim's permission. My question: does this "download" term include ...
2
votes
3answers
149 views

Known windows malware propagated via unmounted iPhone

Last week I was told by our security department that my PC (running windows 7) was infected by a trojan and that it needed to be re-imaged. So re-imaged it was! Given the fact that I had been using ...
0
votes
1answer
452 views

How to combat and prevent a lpcloudsvr302 and bk-coretag.js Virus?

I recently came across a computer that was infected with a lpcloudsvr302 and a bk-coretag.js Virus. I did some research about the two Viruses and realized that their is no reliable source that helps ...
2
votes
2answers
2k views

Ways to inject malicious DLLs to exe file and run it

I'm trying to find all vulnerabilities in my given system. Assume a malicious user has the executable (.exe file) of my .NET application (C#), and a malicious DLL he or she created. Can the DLL be ...
2
votes
2answers
123 views

Is loopback interface protected from sniffing?

I'm trying to understand what are the risks derived from unprotected communications within the same device, by the use of the loopback interface. I've verified it is possible to capture packets, with ...
2
votes
1answer
127 views

Analyzing a suspicious email

Today I received a very suspicious email on my gmail account. When I analyzed the content of the message, this is what essentially made up the message. <center> <a alt="" ...
4
votes
2answers
930 views

How can NSA implants and backdoors be detected? [closed]

It has been a while now since the Snowden revelations of various NSA malware and backdoors. For instance: March 12, 2014: NSA has developed implants to take over targeted computers’ microphones ...
7
votes
3answers
1k views

How does a root kit work inside a virtual machine?

In my class, we are discussing virtual machine based root kits. I've research root kits, but could not find any information specifically talking about how root kits work inside of virtual machines ...
11
votes
3answers
1k views

How to deobfuscate this PHP malware?

Two days ago a file called "images.php" appeared on a friend's server, which he noticed because it caused errors. The file contained the following. This code is of unknown origin and presumed to be ...
1
vote
1answer
658 views

Computer worms, propagation and exploiting vulnerabilities

I have been referred here to ask this question, so I am doing a research on computer worms, I have been through several sites and a few caught my attention, I have learnt that worms propagate through ...
2
votes
1answer
2k views

How to detect infected devices on your local network [closed]

Today I read about a researcher who bought a digital TV recorder and connected it to the internet - probably using port forwarding to enable attackers to connect to the recorder. After a while someone ...
1
vote
2answers
899 views

Does Skype compromise my system (beyond the scope of calls/chats)?

First of all, please don't shout at me for wanting to use Skype. I know that it's evil and I fully expect all the calls and text chats going through it to be stored permanently in govt data centers, ...
1
vote
2answers
309 views

Shared hosting hacked. Should I report this to someone?

A malware file appeared on a friend's server as described in this question. It's a file called "images.php" that is designed to look like nothing important, whose sole function is to wait for an ...
1
vote
3answers
190 views

Where do suspect requests from logged-in users to my website come from?

I have an ASP.Net MVC 4 web application that is hosted on a Windows 2008 server. The application is secured by a custom ASP.Net membership provider. Only users who are granted permission by the admin ...
6
votes
1answer
765 views

Can I isolate a specific computer on my network?

My brother gets malware infections practically every week. Apparently he had a infection over the past 24 hours, I only noticed it because I checked the router logs and saw a massive amount of network ...
-2
votes
1answer
147 views

How malware spreads nowadays [closed]

How malware nowadays spreads? For example, I have a Windows computer infected with some kind of malware (someone ran malicious executable on the computer when nobody was looking at it) and it can ...
1
vote
1answer
94 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
18
votes
4answers
11k views

Can home routers get infected?

I am behind a router(linksys that runs dd wrt on it) and I was infected with sality. I'm curious, can my router get infected too? If yes, how can I remove the infection? I used the search bar but ...
-3
votes
2answers
142 views

What makes iOS more secure than other phone OS [closed]

Let's start off with an example. Here in Canada, credit card companies cannot upgrade you credit card limit. You need to make a request, that will then get analyzed and then, depending on your status ...
3
votes
3answers
3k views

Malware infections from visiting or using YouTube

Is it possible to be infected by viruses or other malware while visiting YouTube? What kind of measures do the YouTube staff take to prevent viruses and malware?
1
vote
1answer
100 views

Why an attacker would use a trojan over a spyware?

I'm trying to figure out some possible attack scenarios for a project I'm conducting. I've read plenty of material about malware and, in particular, spyware and trojans. While it's hard to find unique ...
0
votes
2answers
153 views

Can malware cause firefox to send GET requests?

Is it possible for a site to host malware such that if a certain page is accessed, Firefox is made to send additional GET requests? I'm seeing traffic for attacks coming from me that I haven't done. ...
-1
votes
2answers
204 views

I have discovered a botnet during testing [closed]

Whilst testing a server I discovered a botnet. I have the executable downloaded to the server and decompiled the file to get the strings from it. My question is what would the next logical step be ...
1
vote
2answers
377 views

Is a C plugin safe if I read it through an echoing parser before?

I wanted to use sharable plugins for an application. However, the plugins were extremely time critical, so I wanted to distribute them as C libraries. Now, these are not guaranteed to be safe (the ...
2
votes
1answer
101 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...