Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

8
votes
2answers
242 views

What do I need to do when Facebook says: “Your computer needs to be cleaned”?

I am not sure if this is the correct community for this post. If not please refer me to the correct one. I am getting a "Your computer needs to be cleaned" error message when trying to login into ...
-2
votes
0answers
17 views

How can I get rid of ogafdr.dll malware?

Every time my Windows 7 PC starts, Avast reports the following malicious process: C:\Program Files\cbe0a0d456caf9f5ffc42818634b4af9\d82a24b74d9073b29e5c73bb798c5253.exe The file reported by Avast ...
0
votes
3answers
87 views

How do botnets not get caught when using Gmail accounts for spamming?

Botnets are Spamming through web-mail services like gmail.com,hotmail.com,etc. by compromising email-accounts I read a post from this forum about how online accounts are compromised. Following are ...
0
votes
2answers
40 views

File types and ways that can infect Android devices with malware

From what sources can an Android device be infected with malware? What various file types, executable or non executable, can infect an Android device with malware?
3
votes
2answers
327 views

Google Chrome on Android constantly being redirected

I have an Android (5.0.1 with December 2015 patches). My problem is with Chrome (latest version as per Google Play Store). Which has malicious redirect going on to ...
1
vote
1answer
48 views

What to do with an APK file containing Swf.Exploit.CVE_2015_0323-1 and ELF File?

I received an APK file from a source. Prior to installation, I ran a virus scan on it. The result had following main features: The file contained Swf.Exploit.CVE_2015_0323-1 It required ...
0
votes
2answers
166 views

Why don't the majority of today's malware use strong cryptography?

While reading another story of botnet takedown, my wondering has reached its apogee: Why don't malware authors use cryptography (encryption + signing) provided by good libraries when their creations ...
0
votes
1answer
13 views

Tencent/Safefinder Identify and remove malware [duplicate]

I wasn't paying attention when downloading some apps today and have successfully installed some malware on my PC. I had Safefinder installed and I am currently removing its components and running ...
3
votes
1answer
58 views

Revising Phising Email & it's payload… did I do this right?

Recently my company got a widespread phishing email sent to them, thankfully no one clicked the link (which is great!) Since I'm a student and a current intern working in IT Security I wanted to see ...
-3
votes
0answers
67 views

Malware available to the average person [closed]

What are the types of malware that are available to the average person? What are their capabilities? By average person I mean: Someone who doesn't have a deep understanding about ...
7
votes
1answer
208 views

Is NoScript bad? [on hold]

I just came to know about NoScript, but after installing it opened the author's homepage with an advert for 'SpeedUpMyPC' that pointed to a UniBlue website, which I found fishy. Googling turned up ...
1
vote
1answer
293 views

Privacy error in google chrome

Recently I installed some random softwares on my windows 8.1 PC from the internet and along with that some malware also got installed. I started getting " Your connection is not private " error in ...
0
votes
0answers
22 views

Add new vulnerabilty module on honeypot dionaea

I want to install dionaea but i am not sure about it's capability to collect modern malware. I see that it use old vulnerabilities modules. My questions are: 1) It is possible to add new ...
-1
votes
0answers
56 views

Hacked site/hosting? Or hacked browser?

I need some help. I have a security plugin installed and I received an email notification telling me that A file change was detected on my system for my site. I logged in and noticed no unusual ...
17
votes
2answers
483 views

Do the most common ransomware programs delete the original files as they go, or in a big bulk delete at the very end?

I'm talking about the most common varieties like Cryptolocker, Cryptowall, Torrentlocker, KeRanger, RSA4096, etc. (There is not necessarily a need to answer for all of these, one or two may do.) If ...
0
votes
1answer
87 views

Is Qt framework is under attack or it has something suspicious (only in free version)

I was trying to download Qt framework. I went to its Official site (I'm sure, I checked in Wikipedia) for Visual Studio. But when attempting to download Qt for Windows, my Firefox shows this message: ...
2
votes
2answers
951 views

Malware removal: Iframe injected javascript

My Joomla! website is infected by an iframe injected malware, according to Sucuri SiteCheck: To remove the malware, does it suffice to remove the infected file site/media/system/js/caption.js? Or ...
-2
votes
0answers
46 views

Does anybody knows a good dataset for malware families? [closed]

Does anybody knows a good dataset for malware families? What i need is a dataset where malware are already classified in families.
7
votes
2answers
522 views

Where Does ClamAV Get Its Virus Signatures?

I see that ClamAV has virus definition files which are mostly hash codes in md5, sha1, and sha256 formats, which either look at the whole file or what are called PE sections of an executable file. Of ...
4
votes
3answers
862 views

How to avoid fake “Windows Virus Alert”

I was recently browsing online when I came across this page: When I chose to close the tab, I received this message: And after choosing "Leave this page" twice, I receive this message: ...
0
votes
2answers
96 views

Firefox and chrome infected with hohosearch and newsearch123.com [duplicate]

A fortnight before, I downloaded a keygen file, which I presumed to be fine, but when I started the installation, I felt there is something weird. So I was about to start the installation, but I ...
0
votes
2answers
494 views

How exactly does this Flash malware function on Ubuntu?

In this video, an experienced Ubuntu user manages to infect his system with some sort of malware. This is the first example I've ever seen of truly successful malware in the wild aside from privilege ...
4
votes
1answer
103 views

How to protect TimeMachine backups from Ransomware?

According to Heise (German) Time Machine backups can be encrypted by Ransomware. Sorry I didn't find an English source, please use Google translate. KeRanger had an inactive module ...
5
votes
4answers
263 views

How can I safely test malware in a VM? [duplicate]

This question has probably been asked several times here, but I'll ask it a bit differently. I am trying to learn about malware and how it infects computers and how to disinfect a computer if one ...
0
votes
2answers
90 views

How could one say that older operating systems are more vulnerable?

Experiment conducted by me in Windows using Virtual Machine: I have collected all rogue security software that target a range of Windows versions and several latest malware (no older than a month) ...
0
votes
0answers
29 views

Is it suspicious that mail server sends traffic to Tor Exit node?

I am monitoring the outbound traffic from mail server through IDS and recently I observed there were some traffic sending to Tor Exit nodes from mail server, for example, IP 46.183.85.124. After doing ...
3
votes
0answers
37 views

How to detect suspicious content in a TrueType Font (.ttf) font file

I got curious about how to scan or assess the risk of a particular font file before deploying it to hosts. First line of defense, of course, is to make sure that our hosts are patched against any ...
2
votes
3answers
2k views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
-1
votes
2answers
112 views

Website Loading Content from Malicious Sites

I own a website. Now today I find that when I load the site, Chrome shows "waiting for xxx.com" and some other unknown sites. I never added content or links from these sites. The website is running on ...
7
votes
2answers
282 views

Example of malware in the wild?

I'd like to test an application that detects malware on my network. In order to do that, I have a Windows VM set up that I'd like to infect with malware. But for the life of me, I can't seem to find ...
3
votes
2answers
145 views

Android Malware Dataset

I am working on a project to identify the author of the malicious apk. To test my results I need dataset of malicious apks along with their authors. Currently I am working on a dataset which is very ...
0
votes
1answer
136 views

Preventing uploads of malware to server by changing all extentions to PNG?

Ok, so I have my own website, and you can use the file upload quite a bit, and it is very important to the site. However, I've been hearing that clients can still bypass a file extension restrictions ...
1
vote
1answer
65 views

How can I get infected by computer viruses? [duplicate]

I would call my self a security aware computers professional, and I was asking my self for a long time now allready. How can it be that male-ware gets onto my computer wihtout me actively playing it ...
0
votes
2answers
68 views

Malware or viruses by browser redirects?

Recently was browsing and clicked on a link to the following address: (In code blocks so you cant accidently click it) http://paycheck-calculator.org/ Clicking on this quickly loaded 2-3 different ...
1
vote
0answers
49 views

How does a malware overcomes this facility

I've seen many viruses/malicious VB scripts get executed when accidentally double clicked or through fake shortcuts redirecting to some viruses causing the Victim's PC a serious damage. But nowadays ...
1
vote
0answers
31 views

Polymorphic Analysis

I'm a beginner at malware analysis. For my research studies, I have to identify polymorphic malware based from experiments. I would like to know if there are any guides showing how to analyze the code ...
2
votes
2answers
144 views

Suspicious Network Activity - is my system compromised?

When using Firefox to open a blank page, I have a weird network connection that shows under Network Activity in Resource Monitor (Windows 7). The address is: insiders-guide.pacedev.com. A ...
3
votes
2answers
94 views

My cellphone is infected, and it keeps coming back

Please bear with me as English is not my native language My Android smartphone downloads apps automatically without any interaction. Generally the apps are known but some are unknown apps. I can only ...
2
votes
1answer
242 views

Malware infected ATMs in China via specialized device

Hackers inserted a specialized device which was connected to the notebook into the card reader slot on the ATM and installed malicious software. 100 thousand US dollars were stolen from at least seven ...
96
votes
11answers
8k views

How do you explain the necessity of “nuke it from orbit” to management and users?

When a machine has been infected with malware, most of us here immediately identify the appropriate action as "nuke it from orbit" - i.e. wipe the system and start over. Unfortunately, this is often ...
6
votes
4answers
4k views

Malware infections from visiting or using YouTube

Is it possible to be infected by viruses or other malware while visiting YouTube? What kind of measures do the YouTube staff take to prevent viruses and malware?
21
votes
2answers
3k views

How do I remove my website from the malware database?

I have a website which is basically a service platform. As far as I know there is no malware in my website (at least not found according to these free scanners). However, Check Point malware database ...
3
votes
3answers
90 views

Does typical Ransomware only 'attack' certain folders/filetypes

I expect this is very much on a per malware and OS basis so could potentially be very broad hence the typical. A user's computer has been infected by a piece of malware which aims to encrypt all ...
37
votes
5answers
5k views

How do I safely inspect a potentially malicious website?

Sometimes I'm interested in what's behind a malicious website. How do I stay on the safe side if I decide to inspect? I'm searching for methods that are quicker and more simple than running the ...
139
votes
8answers
16k views

What should you do if you catch ransomware mid-operation?

You boot up your computer one day and while using it you notice that your drive is unusually busy. You check the System Monitor and notice that an unknown process is using the CPU and both reading and ...
0
votes
0answers
30 views

Can a virus execute without user interaction? [duplicate]

I have seen a lot of malware infection techniques where the user is infected by drive by downloads through browser vulnerabilities or social engineering. But is there a way that a virus could execute ...
3
votes
2answers
54 views

Is there any chance of PC getting infected when you analyse PCAP malware file?

Currently, there are lots of pcap files of malware analysis carried by other researchers available on Internet. Such files show the traffic pattern and communication of the malware with it's C&C ...
27
votes
3answers
3k views

Malware that can survive BIOS re-flashing

The well-respected security consultant Dragos Ruiu is reporting that he has been infected with mysterious malware that can survive re-installation of the OS and re-flashing of the OS. In other words, ...
7
votes
2answers
208 views

Can malware infect more than one operating system?

Is is possible for malware to be written in a low-level language such as C or C++ and do the following: Infect a single operating systems(such as Windows) Detect other machines on the same network ...
0
votes
1answer
98 views

website - infected by malware and if yes, how can I treat it? [closed]

A friend told me that the website of our association, here , got blocked by the corporate network of the company he is working for, due to malware (see picture below) I've tried a few website like ...