Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

2
votes
1answer
38 views

What risks do I have now that I accidentaly opened a suspicious URL send to me by Skype?

The following URL was sent to me by a trusted Skype contact (from my university): http://bit.ly/28PPw3V#dahubas=my_skype_id I clicked on it bacause I thought it was the score of an exam. I got ...
-1
votes
1answer
31 views

Decompiling folders inside a jar file [on hold]

I am in possession of a jar file that I have reason to believe has a RAT inside. I downloaded it inside of a virtual machine with jad installed and began to attempt to look at the source. I found that ...
3
votes
2answers
24 views

DGA (Domain Generation Algorithm) - malwares

Some malwares use DGA (Domain Generation Algorithm) to randomly generate domains in order for the zombies to be able to communicate in a resilient manner with the C&C. As far as I know, there is ...
5
votes
2answers
89 views

Revising Phising Email & it's payload… did I do this right?

Recently my company got a widespread phishing email sent to them, thankfully no one clicked the link (which is great!) Since I'm a student and a current intern working in IT Security I wanted to see ...
2
votes
1answer
48 views

Virtual network for malware analysis

I'm attempting to do some analysis work on a malware sample but I'm running into a wall. I can't get the malware to execute correctly and talk to its C2 server. In my lab I have a Windows machine that ...
2
votes
2answers
84 views

Hardening Javascript in respect to Javascript Malware/Ransomeware like Ransome32

Are there any methods or standards to harden Javascript implementations to help reduce/remediate the the risks associated with Javascript malware like the Ransom32 or other types of Javascript attacks?...
1
vote
1answer
51 views

Why do browsers not protect against scripts coming with images?

I understand that this is how it goes: Malformed Image --> Buffer Overrun --> Stack Over Flow --> Execute Malware Pushed On Stack And though I don't a huge amount about this, I know that I ...
3
votes
1answer
98 views

Ransom32: How does it work?

Ransom32 seems to be a new ransomware written (partly) in JavaScript. As I understand it, it doesn't affect a user through a browser / by visiting a website, but by downloading some .rar file which ...
0
votes
0answers
55 views

Pop up in Facebook built-in browser

While I was visiting a page on a usual website with the built-in browser of the Android Facebook app, a pop-up just... poped-up, saying dumb stuff about my cellphone being full of viruses, etc. (Quite ...
1
vote
1answer
50 views

Is CryptoLocker part of the TeslaCrypt ransomware family?

I'm readin a Microsoft report examining the most prevalent ransomware families as of recent. On the news, I've heard of CryptoLocker, CryptoWall and TeslaCrypt, but I don't see any of them ...
1
vote
1answer
1k views

Is there a foolproof method to remove spyware from Android smartphone?

I am owning an Android smartphone. I learnt that factory reset may not remove spyware as it might have corrupted the image being installed by factory reset. Is there a foolproof method which ensures ...
3
votes
0answers
31 views

Host process for windows services network activity between other computer on same network

Wondering if this is normal? I have two PCs hooked up to a router and when the other one powers up and I check my firewall I see that there's some sporadic network activity going on (mainly upload/...
6
votes
4answers
564 views

Is this powershell script an infection?

While I was sitting in front of the computer not using it,my Windows 10 machine quickly flashed a few terminal windows, and then gave me a Windows Security popup, asking for my password. I have no ...
51
votes
10answers
17k views

Can headphones transmit malware?

Can headphones transmit malware? My friend borrowed my headphones (a pair of Apple EarPods) and plugged them into his Android mobile phone for a few minutes in order to listen to a voice message. ...
0
votes
3answers
200 views

How to delete one exe file that is probably malware?

I stupidly saved an .exe file that claimed to be an urgent Firefox patch (318K). I haven't (and won't) run it, but how can I delete it so that it's gone, i.e. no risk to my Win7 laptop? I thought of ...
-3
votes
1answer
133 views

What does a trojan look like? [duplicate]

I would like to know what a trojan looks like. There was a great example of a worm (although it is old) posted by Wired. Viruses embed themselves into an existing program, by changing the existing ...
-1
votes
1answer
94 views

What forms does trojans take? [duplicate]

I'll try and pose this question as simply as possible. I would like to know which forms a trojan can take. Does it need to be an .exe file? Can it be a hidden file attached to an .mp3 file for ...
6
votes
8answers
312 views

Difference between virus and trojan?

To my current understanding: A virus is a program that does not self replicate and relies on the host file being spread. It has malicious intent. A trojan is a program that is run by deceiving the ...
0
votes
3answers
1k views

Is mgicinjs.info a virus or malware site? How to get rid of it?

Today, I noticed that almost all of my web project (published or in localhost) have a set of weird script references in their pages: And they are all automatically generated - they don't appear in ...
-1
votes
1answer
73 views

What to do after exposure to a drive-by infection?

I clicked on a link that pretty clearly offered exposure to a drive-by infection. I won't post the link itself, but I got it from a link which is inside a reddit link (obviously the reddit website ...
0
votes
2answers
515 views

How exactly does this Flash malware function on Ubuntu?

In this video, an experienced Ubuntu user manages to infect his system with some sort of malware. This is the first example I've ever seen of truly successful malware in the wild aside from privilege ...
2
votes
3answers
5k views

How to search for evidence of Camfecting (webcam hacking)?

I'm worried about camfecting (webcam hacking). The camera light on my mac (running OSX) is not on, but it isn't hard wired so that doesn't say a lot. I've ran a virus scan but no signs. Now my idea ...
0
votes
1answer
31 views

Shared folders in Windows to/from unsecured PC on the same network

I have a Windows 10 desktop computer which is my main device. It's password-protected and I'm not concerned about it being physically accessed by bad actors. I have a Windows 7 laptop with a fresh OS ...
-3
votes
1answer
80 views

checking if malware altered system files in windows

a friend called me today because he opened an attachment of an email. It was a double zipped exe file - and malware: I started to analyze the file: first with virustotal - then with radare2 and the ...
1
vote
1answer
75 views

Boot-sector virus - can it spread only through floppy disks?

Do boot-sector viruses spread only through floppy discs, and so are the thing of the past, or can they spread through USB, removable hard drives etc? Techopedia states: The propagation of boot ...
19
votes
5answers
3k views

Dualbooting Windows and Ubuntu, can I get Windows viruses/malware while running Ubuntu?

Today I have both Windows and Ubuntu installed on my SSD. What happens if I for some reason get a malware/virus (targeted for Windows), perhaps downloading something I should not, while I am running ...
24
votes
2answers
2k views

How trustworthy is `sudo apt-get install (package name)` in Ubuntu?

One of the easy ways to install a program in Ubuntu Linux is to type a command in the terminal, but how do I know that the program is coming from a trusted source and not from somewhere dangerous? ...
5
votes
1answer
91 views

Can you extract the encryption key of a computer with full disk encryption via malware?

I recently discovered the subject of cold boot attacks which are able to extract the encryption key of the ram memory after the computer has shut down. and from what I understand is that law ...
-3
votes
1answer
100 views

Trojan horse - only a delivery method? [duplicate]

Viruses and worms are pretty basic, they infect and they spread. Trojans on the other hand do not. But my question is, what do trojans really do? I guess that depends on the payload? Are they (the ...
2
votes
1answer
67 views

How do boot-sector viruses propagate?

I'm doing research on various malware and I came across boot-sector viruses. Kaspersky states that "they are not designed to infect removable media." My question is, how do they spread then? Again ...
12
votes
1answer
219 views

Stack Exchange's javascript is malicious

I have, recently, discovered a rather annoying problem: every first-click I have on any Stack Exchange site creates an advertisement popup. This happens on my desktop, laptop, phone and even a VM. I ...
2
votes
3answers
142 views

Is it possible for a virus to be downloaded unknowingly and run when a website is opened?

Usually, the only time I see viruses happen is when someone mistakenly runs an infected file. But could one also be infected by just visiting a website?
0
votes
2answers
94 views

Can I get malware just by navigating to a webpage? [duplicate]

Is going to a webpage a risk per se? If yes, how does work, and how can we defend ourselves from this? I have to constantly review websites and I get the links from job seekers (that is, I'd navigate ...
1
vote
2answers
71 views

Detecting a Crypted executable that is supposed to bypass antivirus [closed]

I've seen many Crypters being advertised to bypass antivirus and they work. The malware crypted by the Crypter evades antivirus detection. How would you programtically or using a tool reliably ...
9
votes
1answer
2k views

Does analysing Malicious code in gdb pose a security risk?

I have encountered a Malicious Shell-Code & i have ported the shellcode into a compatible C Code which can run the shellcode, i compiled it using gcc -fno-stack-protector -z execstack shellcode.c ...
0
votes
1answer
53 views

Telegram messages in group are seen immediately [closed]

We have a small friends group using Telegram Messenger without any bot attached to group. When we send message in this group it is always seen (double checked) immediately even at midnight and hours ...
3
votes
2answers
227 views

Detecting when a screenshot is taken by a software (spyware) in Windows [closed]

Most trojaning, spyware and keylogger tools have the ability to take screenshots. Is there a way to detect if an app or software is taking a screenshot in Windows? Maybe a Windows API call or dll? ...
38
votes
7answers
10k views

Can cookies carry viruses?

I was wondering whether a cookie can carry a virus (or any security-threatening code). In some sense it is similar to a download. So by simply visiting a site, could I get harmed?
0
votes
1answer
39 views

Add new vulnerabilty module on honeypot dionaea

I want to install dionaea but i am not sure about it's capability to collect modern malware. I see that it use old vulnerabilities modules. My questions are: 1) It is possible to add new ...
8
votes
3answers
638 views

Where Does ClamAV Get Its Virus Signatures?

I see that ClamAV has virus definition files which are mostly hash codes in md5, sha1, and sha256 formats, which either look at the whole file or what are called PE sections of an executable file. Of ...
0
votes
2answers
102 views

Malware or viruses by browser redirects?

Recently was browsing and clicked on a link to the following address: (In code blocks so you cant accidently click it) http://paycheck-calculator.org/ Clicking on this quickly loaded 2-3 different ...
1
vote
1answer
77 views

Creating a system to try new software out

I am using Windows 10 and I like it. I would like to experiment without doing harm to my main system that I work with. Experimenting means, downloading software from doubtful sources, executing ...
5
votes
1answer
73 views

“Segmented” malware

I've been researching how anti-malware tools function and I feel like I'm missing something with heuristic analysis. What I've learned so far Anti-malware programs can use heuristic analysis and ...
1
vote
3answers
219 views

Why don't the majority of today's malware use strong cryptography?

While reading another story of botnet takedown, my wondering has reached its apogee: Why don't malware authors use cryptography (encryption + signing) provided by good libraries when their creations ...
2
votes
1answer
96 views

Detecting Malcode in Excel and Word Documents

There are a bunch of tricks to circumvent potentially malicious macros in office documents you receive. My question is how do I [forensically] detect if there are malicious macros in the documents? ...
2
votes
1answer
181 views

How to scan large .bin files for malware?

I know about websites like VirusTotal, and programs like herdprotect. I'm using Avira and Superantispyware, but once the large bin files are scanned, usually nothing is found. But after running an ...
5
votes
1answer
75 views

How to detect suspicious content in a TrueType Font (.ttf) font file

I got curious about how to scan or assess the risk of a particular font file before deploying it to hosts. First line of defense, of course, is to make sure that our hosts are patched against any ...
12
votes
4answers
6k views

Detecting reflective DLL injection

In the past few years, malware (and some pen-test tools like Metasploit's meterpreter payload) have begun to use reflective DLL injection (PDF) to load a DLL into the memory of a process. The benefit ...