Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

-3
votes
1answer
43 views

How many viruses has the average computer? [on hold]

Malware hides, so you cannot expect your computer to be malware-free, even when you have antivirus. My computer works fine, but I am fairly sure that I might have something lurking in there. Rootkits ...
1
vote
1answer
32 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
0
votes
0answers
12 views

Are there any scareware that install an actual antivirus? [on hold]

I got to thinking about this after reading a bit about scareware, and I thought, could there be a malware example out there that installs a free version of, say, superantispyware or something, but ...
-1
votes
0answers
186 views

Anyone know details about this (Scam email warning for DVSA customers) spoof with malware? [on hold]

The subject line reads (DVSA RECEIPT) and it 'looks' like it's from.. vosa.gsi.gov.uk Many folks where I work received this email today, with the attachment. Some actually opened the email and the ...
-6
votes
1answer
59 views

Am I Being Hacked? [on hold]

A little long story follow me. I have had a weird experience with my pc in the past couple of days. It happened to me like a year ago. It was that my pc would open some weird trolling website every ...
1
vote
1answer
74 views

Benefits of injecting antivirus inside browser

Some antiviruses propose you to use their browser plug-ins. For instance, Avast SafeZone propose you reactive defend by checking signatures of keylogers/malware/spyware etc. But, what's the benefit ...
6
votes
1answer
49 views

Are Push 2FA methods safe from Android and iOS Malware?

I am doing a survey on various 2FA solutions, and recently I came across “Push” 2FA (e.g Duo Security). In this solution, the site (e.g. a banking site) pushes a notification to the user’s mobile ...
1
vote
2answers
93 views

SafeZone: keyloggers/malware/spyware protection

As part of Avast free updates you have a chance to use SafeZone browser. Among features of SafeZone browser I found that SafeZone protects you from keyloggers/malware/spyware. I'm interesting ...
10
votes
1answer
1k views

unauthorized logging into my computer

I ve been suspecting someone logging into my computer because a couple of times, during the user log on screen I saw "Signed in remotely from.." The first timeIi saw some of my pictures copied on ...
42
votes
5answers
9k views

Is it dangerous to call spam phone numbers, even if you know they're spammers?

I sometimes like to check spam just to see how the messages look like, and I found someone who actually put an American phone number (1-XXX-XXX-XXXX). Most of these spammers are either trying to get ...
30
votes
6answers
4k views

How safe are employee laptops in China against International corporate espionage?

I recently took a business trip to China. Our IT department told me I could not take my normal machine, and instead gave me a loaner. This loaner had MS Outlook and was linked to my normal company ...
0
votes
1answer
55 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
3
votes
4answers
86 views

What makes Malware so difficult to remove?

Why is it that when malware or adware is installed it's extremely difficult to remove? You can't go into your programs list to uninstall it and usually need a special program to remove it. What do the ...
1
vote
4answers
143 views

Do technical advice sites sometimes link to malware, and if so, how should we properly research errors? [closed]

Suppose you get an error on your PC that shows up randomly, then you do a search on the internet for the error to find out how to fix it. Typically, you will get some sites that offer a solution, but ...
2
votes
2answers
16k views

How does Remote Access Trojan / Backdoor Software work?

How does a RAT works? I understand it as once we visit the infected website, the browser might download the Trojan to our PC automatically. Will it be executed and auto-installed in our computer? I ...
-4
votes
0answers
28 views

Specific ad links only with Chrome (not in incognito mode or Firefox)

I'm seeing some particular ad (erectile disfunction) links in [website removed] (right in the header) and I'd like to make sure this is not a problem with my pc. I only see those links with Chrome ...
0
votes
0answers
26 views

LAN client attempting to connect to many unkown IPs on Boot [migrated]

I have a Zywall 110 Firewall. While perusing the logs I was seeing random bursts of attempted connections to unknown external IP addresses from a single LAN client computer. I noticed because I would ...
6
votes
1answer
263 views

Should veil framework produce packed and obfuscated binaries which bypass virustotal?

I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
9
votes
7answers
6k views

How to safely view a malicious PDF?

I have a PDF with important information that may contain malware. What would be the best way to view it?
1
vote
1answer
51 views

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

We've received a random email, which was of-course by the way it looks might be a marketing attempt - however, one always needs for a verification to be done. The email read the following: We ...
1
vote
4answers
250 views

iPad infected with virus (popup - admobinew.com)

This morning I was reading some news on some websites (I think one of them was haaretz.com) using my iPad (ios 9.0.1), I clicked on a news and I was redirected to some dodgy website and I started ...
1
vote
1answer
35 views

Router Malware Infection [closed]

I am aware that routers can be infected by malware and I have two questions. Can a router be infected with malware through the USB port. Are routers only susceptible to DNS malware such that you ...
0
votes
4answers
6k views

“Virus Found” Web Browser Pop-up

I use a website that typically creates a new tab with an ad on the first click. Usually, I can close the tab without even looking at it, but recently a more aggressive strain brings up a pop-up (for ...
27
votes
3answers
1k views

Are .dll files normally found in system32 but now in a user’s AppData folder always suspicious?

I recently had to read over some malware reports and associated logs for a confirmed malware detection and subsequent infection of a Windows asset. The logs clearly show .dll files in a user’s AppData ...
5
votes
2answers
109 views

Security of Windows Processes using “RunAs A Different User”

I've struggled to find much information on this topic. What I'm interested in is the following: Scenario A user is logged into a Windows (7, 8.1, etc) workstation as a standard non-administrative ...
5
votes
1answer
44 views

Does prefetching/preloading in web browsers pose a security risk?

Today I googled the name of a domain that was reportedly serving up malware. My search results came up (with the compromised domain at the top of the list) and within seconds my AV gave an alert ...
0
votes
3answers
976 views

Is mgicinjs.info a virus or malware site? How to get rid of it?

Today, I noticed that almost all of my web project (published or in localhost) have a set of weird script references in their pages: And they are all automatically generated - they don't appear in ...
0
votes
2answers
62 views

How dangerous are worm:win32/Goldrv!rfn and worm:win32/vbjk?

Windows defender has detected the following worms on my system and I was wondering how dangerous are they and what is it that they do?
3
votes
2answers
103 views

What to do after a BadUSB attack? [closed]

I'm asking myself what to do after a user gets attacked by BadUSB? (Full scan, boot-time scan, ...?) Is the "bad usb" stick even able to infect the user's system with malware or other spy tools?
6
votes
3answers
2k views

How do browser injections work?

I've heard many times that malware like Zeus, SpyEye and Citadel are able to do browser injections to steal credit card data. How do they do it? how do browser "injections" work? How are they able to ...
2
votes
1answer
117 views

How does Zeus (and other malware) inject code into other processes

Recently, I've been studying how malware works, most recently the infamously known Zeus bot, and I've noticed one thing that I don't seem to understand: The malware is said to be able to hook APIs in ...
1
vote
2answers
67 views

How does “Ransomware” Work?

So I am wondering how Ransomware files work. I know Ransomware encrypts all files with AES-256 for speed but where does RSA come in? Apparently RSA is slow to encrypt files so it uses AES-256 first ...
0
votes
1answer
50 views

Virus: Images get replaced on website [closed]

I have installed Windows 7 again on my laptop with Chrome as browser. The problem is that on different websites I visit, the actual images of the website get replaced with out of context images. It ...
3
votes
2answers
172 views

Google Chrome on Android constantly being redirected

I have an Android (5.0.1 with December 2015 patches). My problem is with Chrome (latest version as per Google Play Store). Which has malicious redirect going on to ...
1
vote
1answer
58 views

How to protect Windows Registery from being changed or from programs trying to add keys

This question is with regards to Windows Personal PC. How to protect Windows Registry from being changed or from programs trying to add keys? I understand that the following general good practices ...
5
votes
1answer
445 views

Is Adobe Flash Player installer redirect due to a malware?

When I go to http://get.adobe.com/flashplayer/ 'Install Now' will redirect me to their homepage without downloading the update or any explanation. What could be going on? Is some malware ...
0
votes
2answers
148 views

Our users get a trojan horse alert on our site, but we don't. What do we do?

A user of our website got a trojan horse alert when she tried to get to our website. But myself and some other friends got no alert whatsoever and can go on the website and download files without ...
2
votes
2answers
87 views

xcodeghost infection in a byod device

We detected network traffic from a device infected with xcodeghost trying to reach a known bot command and control address. Obviously, we removed the device from the network. The user removed two ...
1
vote
0answers
17 views

iLivid infection/ iLivid behaviour analysis

Although lots of surveys and reports have been done on iLivid by lots of malware analyzers, I decided to inspect iLivid independent of previous research. I have read lots of reports about iLivid but ...
3
votes
4answers
165 views

Can my computer get infected if I hover the mouse to check the thumbnail of an e-mail attachment?

So, today an user sent me an e-mail about a suspicious e-mail. When I opened it to check it, I accidentaly hovered the mouse over the "doc.jpg" and it opened the image thumbnail. I never bothered to ...
0
votes
0answers
22 views

What's the Safest Way to Open / View Email Attachments? [duplicate]

I'm aware that opening email attachments is a great way to let malware onto my computer. Friends and relatives often send me videos as attachments, so I'm wondering if there's a way to download and ...
7
votes
5answers
4k views

Browser hijacked - how to fix and prevent?

For the second time in a month, my work PC has been infected with malware that is hijacking my Google search results in Firefox. A search for the URL hijacked searches end up at turns up nothing on ...
1
vote
0answers
89 views

How Skype Click to Call plugin is used to send spam?

My friend had Skype Click to Call plugin installed within browser on Mac OSX. And his Skype account started to send some automatic spam messages linking to lose weight websites (via goo.gl) without ...
0
votes
2answers
51 views

How to reinstall Win7 from a D-drive on an infected laptop

The laptop is infected with some sort of bad stuff (virus? Trojan? malware? etc). I am thinking of wiping it clean and reinstal Win7 "from scratch". I am running Win7 from an HP Probook, which has a ...
0
votes
1answer
45 views

Bad USB malware and Chrome OS

I have recently been readiing about the unpatchable bad usb and similar malware. I use chrome OS which is supposed to be very secure but could someone with physical acess to my system compromise it ...
1
vote
0answers
28 views

Detecting Malcode in Excel and Word Documents

There are a bunch of tricks to circumvent potentially malicious macros in office documents you receive. My question is how do I [forensically] detect if there are malicious macros in the documents? ...
27
votes
2answers
3k views

Identifying the author(s) of a piece of malware

When a new piece of malware appears, people can try to determine where it comes from, and who its authors could be. How do security experts attempt to identify the authors of a new publicly disclosed ...
8
votes
3answers
10k views

Can Keyloggers get passwords from Windows 7/8 Logon Screen?

If yes, do you know some examples of Keyloggers capable of perform this? EDIT: I mean when logon in the windows right after power on the PC and/or when locked with Win+L.
0
votes
2answers
70 views

Difference between antivirus and sandbox?

When reading about how antivirus and sandbox work, my understanding is that an AV scans a file to see whether it matches with known viruses signatures. Sandbox can be used to obtain the behaviors of a ...
1
vote
0answers
19 views

Access android internal storage for full passive deep malware scan?

Is it possible to passively (with a computer) view/scan all content on an android mobile device's internal storage without crackopen/damaging it? For a deep malware scan of the whole storage of the ...