Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

0
votes
1answer
22 views

Sandbox environment for “php malware” analysis

I would like to know how can I analyse an obfuscated malware php code ? I heard about cuckoo sandbox, but it seems too overwhelming for this particular task. So I decided to run a Vagrant box, install ...
15
votes
3answers
750 views

URL Shortening - How to verify if it is a non-malicious URL?

Again, I must mention that I have just started to learn about security. So, please bear with my newbie questions. If I receive a shortened URL from somewhere, say in an my-email or in a social media ...
1
vote
1answer
23 views

When does it make sense to whitelist some subdomains but not others for a given domain?

Little Snitch has been useful to get a better handle on all the connections my computer tries to make. It's main dialog to allow or deny connections allows customizing (e.g. require specific port, or ...
3
votes
5answers
195 views

Is it possible for a phone to be transmitting even while turned off and the battery removed?

Is it technically or theoretically possible for any part of a mobile phone's circuitry to be still on and transmitting even while turned off and the battery has been removed? If so, how? I am ...
0
votes
0answers
28 views

Attacker able to install Screencapturing Software in Windows 7 Guest Account

I am operating in a guest account of Windows 7. Could an attacker that got onto my pc through malware i installed install a video program that records everything i do and send the result back to his ...
0
votes
2answers
199 views

Sophos virus protection continuously blocking codegv.ru

While using google chrome I keep getting a pop-up from Sophos saying "High Risk Website Blocked - Access has been blocked to "codegv.ru" It happens every time I perform any action in google chrome. ...
1
vote
1answer
47 views

Live Boot Devices

Found this article on using Live Boot Devices to do sensitive tasks such as online banking. While the article discusses the benefits of avoiding a possibly compromised host OS, it doesn't mention ...
-6
votes
0answers
50 views

In which language most of malwares for Android are written [on hold]

In which language malicious applications for Android are written? In Java or in C++? I will be very grateful if somebody answer me.
1
vote
1answer
46 views

Is this behavior the result of malware?

I have setup a new set of servers to test a software in Amazon EC2, and had set up my application. I've given it public access and a DNS entry, so its easily reachable by those that need to test it ...
0
votes
1answer
6k views

How much can someone see from my iPhone by connecting to my wifi

How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
-2
votes
0answers
43 views

Are WeChat and Sina safe?

I live in North America. One of my co-workers raves about WeChat because he could meet new people and help them to learn English. In addition, he's interested in learning more about China from ...
12
votes
2answers
2k views

Where do I find JavaScript malware?

I am looking for JavaScript malware. I need it just for local tests on my computer for a project I am working on. Are there any Internet resources where I could find this?
13
votes
2answers
215 views

Do Javascript malware signatures exist?

Are there signatures for malicious JavaScript codes as they exist for other viruses/worms/trojans developed in other programming languages ? If so, are these javascript malware signatures defined ...
11
votes
0answers
208 views

CSP Reports: Ignoring Client Malware

I'm seeing a lot of Content Security Policy (CSP) reports raised because of client-side malware. Many have "blocked-uri" entries like randomstring.cloudfront.net, something.akamaihd.net... I would ...
2
votes
5answers
134 views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
2
votes
1answer
63 views

I need help identifying the cause of weird outbound traffic from my network

I have some weird traffic heading outbound from my network. It is being blocked by the firewall from exiting and I'm not sure what the source is. I've looked at the machine and don't see anything ...
0
votes
1answer
62 views

Getting back control of my android phone [closed]

I am not 100% sure if the TWRP recovery and my android system (newest version of cyanogen mode) were clean of malware at the time i installed them onto my android phone. I did this on a Windows 7 ...
0
votes
2answers
57 views

If malware was detected in browser local storage does computer need to be nuked from orbit

I haven't used Windows partition since mid-June and I booted the system once again just a few days ago. My first action was as usual update all programs marked to be updated (including Windows ...
24
votes
7answers
6k views

Is making a clean install enough to remove potential malware?

Is formatting the disk and reinstalling the system from scratch (to Ubuntu) enough to remove any potential hidden software spyware, keyloggers etc.? Or can something still persist installed in the ...
0
votes
2answers
79 views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?
5
votes
2answers
109 views

Is monitoring registry hives enough to detect new malware installation?

Is checking the state of the supporting files of the Windows registry hives enough to detect if a new software/malware has been installed on the computer or a given Windows regsitry key has been ...
67
votes
7answers
33k views

How secure are virtual machines really? False sense of security?

I was reading this CompTIA Security+ SYO-201 book, and the author David Prowse claims that: Whichever VM you select, the VM cannot cross the software boundaries set in place. For example, a ...
2
votes
2answers
59 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
9
votes
5answers
626 views

Can a mobile phone battery contain malware?

It has 3 terminals and is presumably a smart battery. I bought it on ebay recently for $2.74 USD and that included postage from China to Australia. It would normally retail for maybe $40 - $50. The ...
1
vote
1answer
42 views

The threat of video metadata

There are various old questions on stack exchange which say that malicious code in file metadata can potentially be executed when the file is opened (here, here, and here for example). They are all ...
1
vote
0answers
91 views

Which system files are targeted by malware on Windows XP?

On Windows XP, what are the main system files and DLL files are targeted by malware ? I need this information in order to make a hash of those files and check if my system will be compromised in the ...
-2
votes
1answer
71 views

Unrecognizable Icon. Virus?

Sorry I'm not sure this would be the best place but I've noticed this icon recently. I'm not sure what it is and it only pops up sometimes. When it does, I can't click it or do anything to it and it ...
3
votes
2answers
110 views

Can the USB standard be fixed to prevent the “firmware attack”?

Wired, and others are reporting on a research paper by Karsten Nohl and Jakob Lell. The paper apparently shows how any USB device (not just memory sticks) can be infected with malware at the firmware ...
5
votes
3answers
3k views

Javascript Malware: How does it work, and how can it be mitigated?

I am wondering how malware gets served through Javascript. I've noticed a few illegitimate pop-ups while visiting some financial websites. I wonder how malware exploits work against the application ...
-2
votes
0answers
33 views

After typing a web address, unwanted content “salesforce.com” appears in it and redirects me [migrated]

When I type a web address in my web browser, "force.com" or "salesforce.com" comes up in it. Here's an example: https://k12parentportal.force.com/portal_enrollmenthome>. Everything is correct except ...
5
votes
7answers
798 views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
2
votes
2answers
201 views

Antivirus settings: delete or quarantine the file?

I understand that most antiviruses by default quarantine infected files. I have changed it to remove all infected files immediately. Would this cause more harm than good?
29
votes
6answers
3k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...
30
votes
6answers
3k views

How can normal files hide a virus?

How can normal files supported in the Windows operating system hide a virus? Sometimes opening a .txt , .jpg or .docx files leads to running a virus. How is this possible?
-2
votes
1answer
47 views

Problem in downloading and browsing [closed]

My downloads stop completing and some page in the browser appearing blank or with text only without css or js and so on, some program after complete return me a message when trying to start ...
12
votes
2answers
1k views

Could a malicious JS file pointed on URL/URI attack the browser/computer?

I found some website blacklisted on Google. I mean when you try to visit them, you get something like shown on this picture: After a small search, I found that some of them have a malicious ...
3
votes
3answers
647 views

Is JavaScript malware as dangerous as native viruses? [closed]

Can JavaScript malware be as dangerous and damaging as more traditional viruses that are programmed mostly in native APIs?
7
votes
1answer
77 views

How does malware hooks ASEPs?

What are the operations made by malware to hook the auto start extensibility points in order to be able to run at the startup of the computer that runs Windows operation system ?
3
votes
4answers
587 views

does switching to linux remove existing computer virus

if you change from a malware/spyware infected windows setup to a linux setup will infections migrate to linux if they were on the computer? (when you are hacked/infected is it the op system that is ...
1
vote
2answers
83 views

Do multiplatform viruses exist? [closed]

Is there any known virus that targets the main operating systems: Windows, Linux and Mac OS X?
0
votes
2answers
62 views

How exactly does this Flash malware function on Ubuntu?

In this video, an experienced Ubuntu user manages to infect his system with some sort of malware. This is the first example I've ever seen of truly successful malware in the wild aside from privilege ...
1
vote
3answers
114 views

Can a PDF file contain a virus?

Could a PDF file contain any type of malwares ?
0
votes
1answer
43 views

Questions about common exploits

I'm investigating the state of my MacBook Pro which I know was compromised, and do not know if I removed the exploits completely (and I realize, technically will never know this). I'm trying to hone ...
0
votes
1answer
62 views

Ubuntu 12.04 server attacked using Wordpress vulnerability (plugin?) [duplicate]

Env Rackspace cloud server Wordpress 3.9.1 Ubuntu 12.04 Linux web.mydomain.com 3.2.0-67-virtual #101-Ubuntu SMP Tue Jul 15 17:58:37 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux History These may ...
15
votes
3answers
1k views

Can Windows malware harm a Linux computer when it's executed with Wine?

I am an (Ubuntu) Linux user. Sometimes, I have to use Wine for running Windows executables. I would like to know if Windows malware (virus, trojan, worm,...), i.e. malware that was not intended to ...
0
votes
3answers
94 views

Has personal computing security gotten better or worse in recent years? [closed]

I have a lot of experience with software as a developer, and am trying to move from newbie to more informed about present-day security. Everything I uncover makes me feel that personal computers have ...
8
votes
3answers
182 views

How to identify and analyze malware that checks for security tools before running?

I've been reading about the ZeroAccess and looking into some bot's code source* and I found this piece of code which checks if filemon is running in the infected computer before running the bot. ...
1
vote
3answers
86 views

is it possible to upload infected pictures to a website?

I have a small website on which users can upload several types of files: images, zip files ... (except .exe files). Suppose a user uploads via the front end interface of my website a picture which is ...
2
votes
3answers
99 views

Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?

Preferably with a vanilla Linux kernel i.e. not using SELinux or GrSecurity? Lately there has been a case of in-the-wild UNIX server malware: ...
1
vote
3answers
214 views

How to tell if my laptop is being spied on

I've been trying to determine if there is malware on my OS X 10.9.3 Mac, that is could be doing keylogging or other forms of non-destructive intrusion. Given the (not technically based) suspicion I ...