Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

0
votes
2answers
123 views

VM security, how to access main OS

Is there any way for me to access the main computer if the VM has been infected? Let's say that I am running Debian or ubuntu in a VM and the main computer uses Windows (or other way around just so ...
6
votes
3answers
889 views

How could malware like Stuxnet be detected?

Stuxnet and others in this list of state-of-the-art Internet worms had certain features that they were very stealthy in leaking out the information they harvested. Thus it managed to go under the ...
1
vote
1answer
77 views

Are virtual “canary” systems used to detect malicious programs?

I was wondering if malicious programs are detected using a virtual system. For example a "canary" system would be set up in a virtual environment then unknown and untrusted programs would be executed ...
1
vote
1answer
741 views

Orbit Downloader botnet program removal [solved]

Recently (shortly after midnight on 10/8/2013) I installed and ran Orbit Downloader. After learning that the latest version (4.1.1.8) has a botnet-like module included I immediately stopped the ...
6
votes
3answers
2k views

Possible to detect packed executable?

A packer is a way of obfuscating an executable program, i.e., transforming so the result is still executable and has the same effect when run, but looks different (so it won't be detected by static ...
-1
votes
1answer
250 views

Can someone remotely get into my computer and make it look like I typed something in a search? [closed]

Is it possible for someone to remotely manipulate the keys on my computer to make it look like I was typing?
0
votes
2answers
498 views

How does the Mega-D BotNet send spam?

I have just been reading an report that analyzed the Mega-D Botnet, but what I haven't fully understood is how they are used to send spam? What email address is the mail sent from? Does each bot ...
1
vote
0answers
36 views

Removing PHP Shell from server [duplicate]

I have looked at a few other questions related to this but nothing specifically answered what I was wondering about. Say for example you have a server that is infected with a php shell such as c99. ...
2
votes
2answers
321 views

Using a virtual machine as a buffer between USB media and OS

I was directed here from the Unix & Linux site. I've gone through some of the related questions, but they seem to be more concerned about whether a guest OS can access the host OS in someway. ...
-2
votes
1answer
112 views

Stuxnet Blacklist

I want to find out different pattern for the Stuxnet virus ,I have searched for these patterns on internet but could not found the patterns . Your help is appreciated
0
votes
3answers
3k views

Malware Suddenly Uploaded To My Website! [duplicate]

This is my first question here on the IT Security section of Stack Exchange, so if there is any problems with my question I apologize. Basics Suddenly Google says that my website contains Malware! ...
0
votes
2answers
220 views

Random File downloaded

Okay so I was setting up stuff on my new mac earlier, downloading flash and office. They both downloaded and installed smoothly, but after I noticed a weird new file in my 'downloads' folder: ...
0
votes
0answers
16 views

How to remove popup malware - sponsorship/bigfintuna/milesandkms [duplicate]

I have a malware problem similar to the one described here and here and I'm looking for information on how to remove it. Spybot Search and Destroy and Malwarebytes Antimalware both give my computer a ...
0
votes
1answer
132 views

What is “KDV” in antivirus databases?

I scanned a file (virus) on VirusTotal and 3-5 antivirus labelled it as Generic.KDV.549626 Is there any central "KDV" database where all the entries related to a virus are stored?
2
votes
1answer
250 views

Where's the virus in this web site?

I made my friend go to this web site and it immediately infected his machine with malware (AntiVirus SecurityPro). It happened just by going to the front page. It seemed the malware started up, but ...
3
votes
5answers
169 views

Windows: Any method to enforce user confirmation before the browser opens a URL requested by an external desktop app?

A robust outgoing firewall will protect against desktop applications directly connecting to the internet without your permission. However, as the browser is a generally authorized application for ...
0
votes
1answer
148 views

What vulnerabilities does a malware exploit? [closed]

I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. ...
0
votes
3answers
935 views

How to find vulnerable sites on a web server

A client of mine has a managed VPS with dozens of websites on it, maybe even hundreds. Now his server keeps getting infected on a regular basis. The webhost / server admins keep digging in the dark. ...
1
vote
1answer
790 views

Static analysis of Android applications using Androguard

I am building a project a part of which involves performing static analysis for Android applications. I know of Androguard and its tools that help in analyzing Android apks. But I am stuck and don't ...
4
votes
1answer
994 views

How do I know if a font is malicious?

There are cases of fonts being used for exploiting vulnerabilities {for ex: ThreatPost, SecureList and F-Secure}. My question is if you ever get hands on such a font, how do you know that it is ...
1
vote
3answers
630 views

Text changing virus

Can malware change words that I have typed and then saved in the computer'? If so, how likely is this?
1
vote
3answers
2k views

What is “download-new.com”?

This strange site came up as the second result in a google search for itunes. http://download-new.com/apple-itunes/ (Although the url in the result read itunes.download-new.com.) Embarrassingly, I ...
1
vote
0answers
59 views

How to remove rootkits and malware? [duplicate]

I have downloaded and ran the programme Rootkit Hunter and the results are worrying. I don't know much about malware other than a malicious individual has persistently been installing it onto my ...
9
votes
2answers
3k views

How can a malicious URL affect a computer?

Many security experts advise not to click on malicious URLs. How can clicking a URL affect a computer's security? If a malicious file was downloaded and executed, then a computer's security may be ...
-2
votes
1answer
121 views

How deeply is Adobe inside your Windows environment? [closed]

Well basically as an experienced user I am really afraid on the way that Adobe deeply resides into all my Windows based workstations. Basically in every machine that has some Adobe solution when we ...
1
vote
1answer
313 views

Scan Source Code for Potential Viruses

If you are sent a program written by someone so that you have the complete source code, how would you go about scanning the source code for any potential viruses/malware? Note: While bugs and ...
-6
votes
1answer
353 views

Do you recognise this suspicious folder: Malicious or Benign [closed]

Does anyone recognise this suspicious folder that sits on my C drive? The folder sits on my C drive at C:\cacde6d0fd849a939328ab\ The name obviously looks like a hash/encryption/or junk text. The ...
0
votes
1answer
342 views

Remote Administration Tools and firewalls

I was faced with a question a few days ago, regarding how a RAT server can reach out through the firewall and connect to the client. This was something that I've never given any thought to before, so ...
2
votes
1answer
112 views

Tagged website malware

A common occurance I've found when doing forensics on compromised websites is a pattern like this: <span>Clean code here</span> <!--0c0a22--> ... malware code here ... ...
3
votes
1answer
44 views

OS reinstallation security contribution

For an average user (doing on-line payments, etc.), would it be useful to periodically conduct a OS re-installation of his computer to improve security? How often would that be and how much extra ...
3
votes
1answer
268 views

Should I trust and play every embedded video on Facebook?

Regarding to trusted sites like YouTube, should I trust other videos when embedded to Facebook, usually, when user shares a link a thumbnail image will be created and previewed, then, we need only to ...
-5
votes
1answer
384 views

How to prevent malware infection and file accessibility through a wireless router? [duplicate]

The answer suggested in the 'duplicate' is about a different issue. But since my original wording of the question seems to have not been clear - here's a second attempt: Is there any danger of any of ...
2
votes
3answers
331 views

Should I trust URL based on file extension like this: http://example.com/image.jpg

I created a slideshow and mentioned that user must not trust URL based on file extension, however, I got some claims against that, because URL's like this should be safe: ...
2
votes
2answers
2k views

Is this a valid Windows update page

In my chrome browser if I google for Windows Update the first hit is windowsupdate.microsoft.com/‎ When I click on it I am redirected to ...
2
votes
3answers
349 views

How could an iPhone be transmitting abnormal loads of data without apparently running anything?

My iPhone has sent/received 900MB in 15 days from "com.busuu.japanese.a" I got this information from Onavo, which 'compresses' my data. I have never heard of Busuu until today. It is a language ...
4
votes
1answer
181 views

Securing a Site: Diversity over Simplicity?

This question was derived from my off-topic questioning here: Does Centralisation Decrease the Probability but Increase the Damage of Exploits? Like before, I suspect this may be overly abstract as a ...
0
votes
1answer
393 views

What does it mean by the 'Hash of a malware'?

I have just recently started to delve into the topics of malware. In my hunt for malware binaries, I came across certain responses that it is not easy to grab binaries based on malware names like ...
3
votes
1answer
577 views

Why does broad based malware use XOR obfuscation?

As per title... The malware can easily be de-obfuscated if it was obfuscated using common and known XOR techniques. Why don't malware authors use any other method that make it much harder to ...
-2
votes
1answer
124 views

Infection risk downloading one’s own file from Gmail

Say you boot into Linux from a brand new Live USB. The USB is write protected. The memory stick has never been exposed to the Web in its life. You surf all day on Firefox building your library of ...
2
votes
3answers
1k views

Malware not showing up in virus scan

I have some malware on my computer at work that I'm having a hard time getting rid of. I'm only interning there over the summer, so I'm guessing that it was downloaded by the previous user because I ...
0
votes
1answer
1k views

Why aren't sophisticated Malware written with .NET [closed]

I've been trying to research malware techniques lately, as malware analysis intrigues me. I've got a pretty heavy background in .NET, and based on my 7+ years in .NET, I feel that I could write a ...
4
votes
1answer
127 views

Recovering from malware in the registry

I'm a trainee who writes malware samples to later be tested. A basic piece I wrote in C++ kills explorer.exe, taskmgr.exe and repeats this every second. I used a bit of code to add my application ...
1
vote
1answer
3k views

How to check if your computer has a backdoor installed on it? [closed]

Just some time ago I had this unusual popup from Malwarebytes Anti-Malware (MBAM): I did a quick Google of the IP address and found this thread where the OP is complaining of MBAM blocking ...
2
votes
1answer
175 views

What anti-keylogging programs can you use when using a public PCs

Are there anti-keylogging programs that can keep you safe while you are using a public PC terminal? Do they exist and what are these? I like to know that I am safe when entering data on a public PC ...
17
votes
3answers
882 views

Are official browser add-ons really safe?

Almost any browser addon/extension that I install on my Chrome or Firefox (be it Firebug, RESTClient, ...) warns me, saying: It [the add-on] can: Access your data on all website Access ...
2
votes
1answer
1k views

Windows PE file and Malwares

Trying to understand how and why any virus, malware, worm and code injections are successful after all in a Windows Portable Executable format. I was going through the PE structure documentation, ...
35
votes
2answers
12k views

How secure is the Windows 8 included Anti Virus known as Windows Defender?

How secure is the new Windows 8 anti virus known as Windows Defender? Does it have a protection against malware which uses UAC bypass/process injection/rootkits/process persistence/running the binary ...
6
votes
4answers
5k views

Are there faux/fake malicious websites to test web reputation services similar to EICAR?

Antivirus writers have agreed for their software to recognize a standard "fake" virus file - the EICAR file, to let users check, that the software is up and running. Are there any equivalent test ...
2
votes
1answer
567 views

How Browsers prevents Malware and Phishing attacks

I want to know how phishing and malware protection features are implemented in modern browsers like Chrome, Firefox, IE etc. Are these features heuristic based, or do browsers maintain a list of ...
-1
votes
2answers
375 views

My Computer hacked?

I have Window 7 and believe it has been hacked. On two occasions, as I was reloading my operating system, I got a message that my computer had been counterfeited. I get the impression that my computer ...