Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

-1
votes
3answers
109 views

What are the differences in Linux and Windows security that cause Windows to get so many more viruses? [on hold]

I am trying to gain a more detailed understanding of specific features of the Windows and Linux security models that makes Windows so much more prone to infection by viruses than Linux. As an example ...
1
vote
1answer
58 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
3
votes
0answers
78 views

Skype called someone and connected to them with no action on my part. What do I do?

This happened to me today, September 12, at about 6pm. Any ideas about what happened, what's going on, and what I should do? I was at home alone with my 2 year old -- I was feeding her dinner. All of ...
5
votes
7answers
849 views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
0
votes
0answers
27 views

What are these publicly available tools allow you to identify businesses that use remote desktop software? [on hold]

I keep going over security articles regarding PoS malware (and any malware, for that matter) and I notice time and time again the statement, "Cybercriminals use publicly available tools to identify ...
0
votes
2answers
95 views

Trying to get rid of hackers who have access to all my devices

What is the best way to go about getting rid of hackers that have gained access to all my personal computers, (both old and recently purchased) phones, and even random computers I use to simply get ...
1
vote
3answers
97 views

If malware was detected in browser local storage does computer need to be nuked from orbit

I haven't used Windows partition since mid-June and I booted the system once again just a few days ago. My first action was as usual update all programs marked to be updated (including Windows ...
0
votes
1answer
114 views

How to execute an exploit without user interaction?

Is there an existing exploit, virus or malware that doesn't need any user interaction? In metasploit for example. No link to clicked, no pdf to open , no vba or exe to execute by the victim.
0
votes
0answers
22 views

Application Privilege Control in Kaspersky blocks program with no digital signature

I made a small application that displays hello world to the console output and attempted to open it in another computer that had Kaspersky fully updated. When I ran the application, Kaspersky gave a ...
0
votes
3answers
174 views

How to search for evidence of Camfecting (webcam hacking)?

I'm worried about camfecting (webcam hacking). The camera light on my mac (running OSX) is not on, but it isn't hard wired so that doesn't say a lot. I've ran a virus scan but no signs. Now my idea ...
1
vote
1answer
63 views

Is it possible to compromise Bing to redirect user to a malware?

I just got a new laptop and the first thing I wanted was to install Chrome. I opened IE and searched for "google chrome" in Bing. The first result was an ad with the link pointing to ...
0
votes
1answer
35 views

Virus (or Trojan) in Android

Definition of virus is (from Wikipedia): A computer virus is a malware program that, when executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data ...
-2
votes
1answer
87 views

Interesting security demos for beginners [closed]

I am thinking about a creating short security demo to get people interested in the security topic. I've had a couple of ideas just want to see if anyone has anything else interesting. Edit: I was ...
2
votes
0answers
49 views

Are malware detection rulesets publicly discoverable?

I am uncertain about how public malware detection rulesets are? By a "ruleset" I mean the rules, usually written in Yara, that malware detection engines use to determine whether a file or memory ...
-1
votes
0answers
9 views

Are there any data sets from previous mobile forensic acquisitions available?

Even though the question by itself arises big privacy concerns, I would like to ask if there are datasets publicly or under specific agreements available, related to post-mortem forensic acquisitions ...
0
votes
2answers
667 views

Sophos virus protection continuously blocking codegv.ru

While using google chrome I keep getting a pop-up from Sophos saying "High Risk Website Blocked - Access has been blocked to "codegv.ru" It happens every time I perform any action in google chrome. ...
1
vote
0answers
34 views

My website redirects to malware link [migrated]

I coded my own website and uploaded to a host. Some days ago I realized that in front page suddenly redirects to an unknown websites, until 3-4 redirects. The redirects ends up at: ...
24
votes
4answers
11k views

Does a Virtual Machine stop malware from doing harm?

I would like to know if it is save for the host system of a virtual machine (VM - VirtualBox OSE in my case) to execute malware. Can a virus break out and read or write data from the host system? ...
0
votes
1answer
42 views

How do I secure X server against spyware in a GUI application?

Suppose you have a GUI application, that potentionally may be too curious about your environment, such as the list of window titles. How do I limit application's ability to enumerate windows, capture ...
2
votes
2answers
83 views

How to get rid of an Ad bot?

The issue started due to setting up a proxy server on a PC connected to my network. I then realized that all of my devices that connected to the network, including PCs and phones, are all infected by ...
0
votes
1answer
35 views

Virtual Penetration Test Lab - Figuring Out Its Market Size

Is there any reliable data available based on which the Global Market Size of Virtual Pen Testing Labs ( or Cyber Ranges ) can be ascertained ? If NOT , is it possible to calculate it ?
-1
votes
0answers
49 views

Is it safe to play around with this on a virtual machine? [duplicate]

I found a hard drive destroyer and I am trying to see exactly what it does and what it looks like while happening. I also do not want to lose my computer in the process. I downloaded VirtualBox and ...
0
votes
1answer
158 views

Hacking Gmail with 92 Percent Success - Does popular GUI framework designs reveal UI state change ?

The media has been claiming for the last 2 days that GMail can be hacked . http://www.cnet.com/news/researchers-find-way-to-hack-gmail-with-92-percent-success-rate/ They have based their ...
0
votes
1answer
51 views

Sandbox environment for “php malware” analysis [closed]

I would like to know how can I analyse an obfuscated malware php code ? I heard about cuckoo sandbox, but it seems too overwhelming for this particular task. So I decided to run a Vagrant box, install ...
4
votes
5answers
901 views

Is it possible for a phone to be transmitting even while turned off and the battery removed?

Is it technically or theoretically possible for any part of a mobile phone's circuitry to be still on and transmitting even while turned off and the battery has been removed? If so, how? I am ...
15
votes
3answers
781 views

URL Shortening - How to verify if it is a non-malicious URL?

Again, I must mention that I have just started to learn about security. So, please bear with my newbie questions. If I receive a shortened URL from somewhere, say in an my-email or in a social media ...
1
vote
1answer
29 views

When does it make sense to whitelist some subdomains but not others for a given domain?

Little Snitch has been useful to get a better handle on all the connections my computer tries to make. It's main dialog to allow or deny connections allows customizing (e.g. require specific port, or ...
0
votes
0answers
34 views

Attacker able to install Screencapturing Software in Windows 7 Guest Account

I am operating in a guest account of Windows 7. Could an attacker that got onto my pc through malware i installed install a video program that records everything i do and send the result back to his ...
1
vote
1answer
54 views

Is this behavior the result of malware?

I have setup a new set of servers to test a software in Amazon EC2, and had set up my application. I've given it public access and a DNS entry, so its easily reachable by those that need to test it ...
1
vote
1answer
7k views

How much can someone see from my iPhone by connecting to my wifi

How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
11
votes
2answers
2k views

Where do I find JavaScript malware?

I am looking for JavaScript malware. I need it just for local tests on my computer for a project I am working on. Are there any Internet resources where I could find this?
5
votes
2answers
227 views

Do Javascript malware signatures exist?

Are there signatures for malicious JavaScript codes as they exist for other viruses/worms/trojans developed in other programming languages ? If so, are these javascript malware signatures defined ...
6
votes
0answers
226 views

CSP Reports: Ignoring Client Malware

I'm seeing a lot of Content Security Policy (CSP) reports raised because of client-side malware. Many have "blocked-uri" entries like randomstring.cloudfront.net, something.akamaihd.net... I would ...
2
votes
5answers
163 views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
2
votes
1answer
73 views

I need help identifying the cause of weird outbound traffic from my network

I have some weird traffic heading outbound from my network. It is being blocked by the firewall from exiting and I'm not sure what the source is. I've looked at the machine and don't see anything ...
24
votes
7answers
6k views

Is making a clean install enough to remove potential malware?

Is formatting the disk and reinstalling the system from scratch (to Ubuntu) enough to remove any potential hidden software spyware, keyloggers etc.? Or can something still persist installed in the ...
0
votes
2answers
90 views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?
1
vote
2answers
124 views

Is monitoring registry hives enough to detect new malware installation?

Is checking the state of the supporting files of the Windows registry hives enough to detect if a new software/malware has been installed on the computer or a given Windows regsitry key has been ...
66
votes
7answers
34k views

How secure are virtual machines really? False sense of security?

I was reading this CompTIA Security+ SYO-201 book, and the author David Prowse claims that: Whichever VM you select, the VM cannot cross the software boundaries set in place. For example, a ...
1
vote
2answers
65 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
9
votes
5answers
630 views

Can a mobile phone battery contain malware?

It has 3 terminals and is presumably a smart battery. I bought it on ebay recently for $2.74 USD and that included postage from China to Australia. It would normally retail for maybe $40 - $50. The ...
1
vote
1answer
45 views

The threat of video metadata

There are various old questions on stack exchange which say that malicious code in file metadata can potentially be executed when the file is opened (here, here, and here for example). They are all ...
0
votes
0answers
93 views

Which system files are targeted by malware on Windows XP?

On Windows XP, what are the main system files and DLL files are targeted by malware ? I need this information in order to make a hash of those files and check if my system will be compromised in the ...
-2
votes
1answer
75 views

Unrecognizable Icon. Virus?

Sorry I'm not sure this would be the best place but I've noticed this icon recently. I'm not sure what it is and it only pops up sometimes. When it does, I can't click it or do anything to it and it ...
3
votes
2answers
123 views

Can the USB standard be fixed to prevent the “firmware attack”?

Wired, and others are reporting on a research paper by Karsten Nohl and Jakob Lell. The paper apparently shows how any USB device (not just memory sticks) can be infected with malware at the firmware ...
5
votes
3answers
4k views

Javascript Malware: How does it work, and how can it be mitigated?

I am wondering how malware gets served through Javascript. I've noticed a few illegitimate pop-ups while visiting some financial websites. I wonder how malware exploits work against the application ...
2
votes
2answers
222 views

Antivirus settings: delete or quarantine the file?

I understand that most antiviruses by default quarantine infected files. I have changed it to remove all infected files immediately. Would this cause more harm than good?
29
votes
6answers
3k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...
25
votes
6answers
3k views

How can normal files hide a virus?

How can normal files supported in the Windows operating system hide a virus? Sometimes opening a .txt , .jpg or .docx files leads to running a virus. How is this possible?
-1
votes
1answer
49 views

Problem in downloading and browsing [closed]

My downloads stop completing and some page in the browser appearing blank or with text only without css or js and so on, some program after complete return me a message when trying to start ...