The process of removing a virus or malware from a system.

learn more… | top users | synonyms

1
vote
2answers
50 views

Virus Infected: unable to open anti-virus web sites?

Recently I installed KMSPico, after that many unwanted softwares were installed on my system, later I uninstalled all of them and removed related folders. But strangely from my system I couldn’t open ...
4
votes
3answers
169 views

Fiddler show external requests but not initiated by any legitimate process

While debugging my web application in Fiddler, I found out that there are some suspicious requests to some hotel sites, search requests to google.pl. etc. See below images. Strangely there no process ...
0
votes
3answers
690 views

Removing a Redirect Virus from Fedora Linux

Despite several attempts listed below certain websites are getting redirected to a certain ad website automatically, out of the blue on linux. When some website starts redirecting to this ad website ...
1
vote
1answer
31 views

Where can I get more info about these viruses?

I've been using Airtel 3G Dongle (Data Card) on Windows and ClamWin has detected the following viruses in the dialer software of Airtel: C:\Program Files\airtel\TCPOptimizer.exe: Win.Trojan.Swrort-...
1
vote
3answers
405 views

How can I kill minerd malware on an AWS EC2 instance? [duplicate]

I have an AWS EC2 instance running RHEL 7.2 which seems to have been hacked by a BitCoin CPU Miner. When I run ps -eo pcpu,args --sort=-%cpu | head, it shows that there is a CPU miner that's taking up ...
7
votes
2answers
114 views

Detecting Process Hollowing

I was brainstorming methods of detecting process hollowing and other forms of code injection, and this one seemed pretty robust. Would it be possible for a "process hollowing scanner" to enumerate ...
0
votes
3answers
1k views

Is mgicinjs.info a virus or malware site? How to get rid of it?

Today, I noticed that almost all of my web project (published or in localhost) have a set of weird script references in their pages: And they are all automatically generated - they don't appear in ...
8
votes
3answers
766 views

Where Does ClamAV Get Its Virus Signatures?

I see that ClamAV has virus definition files which are mostly hash codes in md5, sha1, and sha256 formats, which either look at the whole file or what are called PE sections of an executable file. Of ...
0
votes
1answer
48 views

Tencent/Safefinder Identify and remove malware [duplicate]

I wasn't paying attention when downloading some apps today and have successfully installed some malware on my PC. I had Safefinder installed and I am currently removing its components and running ...
3
votes
1answer
886 views

Is my network affected by malware?

I am using Wi-Fi at my home, so I can connect more devices like my phone and computer in the same network. For the past two months, whatever website I visit, it loads for a long time and at the end it ...
3
votes
3answers
458 views

How do I remove disorderstatus.ru virus? Prevent reinfection? Make sure there is no (BIOS) rootkit left?

I have recently had two PCs infected with disorderstatus.ru / differentia.ru, by plugging an infected pendrive. From Google searches, it appears that it is a recent virus, or at least with recent ...
1
vote
2answers
78 views

VirusTotal desktop file uploader seems infected

I wanted to scan my process with VirusTotal.com and for this I downloaded vtuploader2.2.exe from their website. Before executing, I uploaded it to VirusTotal.com and scanned it for viruses to make ...
6
votes
5answers
4k views

Why do some antivirus programs find infections that others miss?

I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up. In scanning my system with ...
6
votes
3answers
306 views

Does malware persist after wiping hard drive and reinstalling OS from manufacturer disc? [duplicate]

This question is related to a computer where users other than the owner have had access for periods of several hours at a time. The following steps have been taken to clean the computer: Used ...
4
votes
1answer
83 views

Is there a name for an anti-virus station / kiosk?

I am not able to define the exact term for a station that is meant to scan whatever media coming from outside a company and that have the following specifications: The station should never be on any ...
1
vote
1answer
147 views

Do I Have A Virus (and What To Do)? [closed]

Background: Windows 8, not a special edition. Windows Defender and Webroot are both installed and have been installed for over a month. Yesterday I got a weird error that I've never seen before that ...
4
votes
3answers
1k views

What do I do, I got a virus warning on a webpage

I went to the web address (hxxp://www.asanka.com) (WARNING: BE CAREFUL WHEN VISITING) on Safari, then suddenly I got a warning message [image below] What do I do? I'm freaked out. I have a lot of ...
2
votes
2answers
256 views

How to get rid of DNS Unlocker on Windows [closed]

I have found several online guides about removing DNS Unlocker but I haven't been able to complete any of the steps because no suspicious files, programs, etc. show up when I look for them. Google ...
0
votes
2answers
164 views

Removing malware from a USB drive

Let's suppose I plugged in my UBS flash drive in my friends' PC and it got infected with malware. Is there a way I can wipe the USB drive without connecting it my or some other computer (and infecting ...
2
votes
1answer
424 views

How can I find how Cryptowall infiltrated my work network? [closed]

Yesterday in the morning a colleague noticed that all files on the file server's Public folder were encrypted and had the HELPME@FREESPEECHMAIL.ORG text appended to each filename. Public folder is ...
-2
votes
2answers
91 views

Do you know a harmless exe file that copies itself into a file?

I'm doing a simple project where I read an exe file and if I find a virus that I already know, I erase it from the file. I have to test it with a virus (I'm looking for something harmless) that insert ...
0
votes
2answers
177 views

Media players (vlc, spotify and windows media player) don't work after a virus attack [closed]

I just got attacked by a couple of viruses while my laptop was completely unprotected. I installed the necessary programs and tried to get most of the symptoms to go away. I also think I deleted most ...
5
votes
2answers
355 views

How do you know if the bios has been compromised?

To secure my PC I have setup a BIOS password, preventing any access from a live-cd. Recently I've noticed that when the BIOS asks for my password, I just have to press Enter to boot. It doesn't work ...
3
votes
2answers
297 views

I ran a virus on a PC. What should be the next steps?

I wanted to remove a probably malicious executable, but instead inadvertently double-clicked on it while using an account with administrative privileges. Nothing visible happened during a few seconds, ...
2
votes
0answers
39 views

How to associate an antivirus with a file to delete it wherever it detects the file? [closed]

How to associate an antivirus with a file to delete it wherever it detects the file? I want My ESET Smart security 8 to delete a specific file wherever the file is . or not allow the file to run. ...
-6
votes
1answer
136 views

IVE BEEN HACKED! [duplicate]

So i downloaded an application that was fishy that came out a couple hours ago on youtube and i was stupid and didnt scan it or anything and i let it run... blam instant security warnings and i ...
36
votes
7answers
217k views

How can I watch porn, safely, and not get a virus? (and not infect corporate data also)

I'm part of a small office in the middle of nowhere, and we just got absorbed into a large mega corporation. Sometimes we watch porn, at the office, on company computers, using the company Internet....
0
votes
2answers
419 views

Help understanding malware infection

I'm kind of a newbie to security and need help fully understanding how I would infect myself inadvertently. Let's say I was to download a .zip file attached to an email and I unzipped the contents. ...
2
votes
2answers
404 views

Are there any logic-bombs that execute when the file is deleted?

I want to delete a suspected malicious file from a server. For the purposes of this question assume that the infected machine is Windows Server 2003 or later. Is there any risk in deleting such a ...
0
votes
1answer
4k views

How to backup files stored in a possibly infected computer?

I am to reinstall an old Windows XP installation. Before I format the drive, I have to backup some data (~200GB) like .doc files, pdfs, photos to an external hard drive. My concern is that this ...
1
vote
3answers
408 views

How do I know if I have a keylogger from my Flash client on Windows 7?

I'm at work and having some issues here, so I found a lot of suspicious files involving the Flash, so I though that could be a keylogger. How do I find out if it is, and if truly is, what do I do to ...
0
votes
2answers
114 views

Course of action with this malware [duplicate]

After clicking in a fake "download here" button in a webpage for film downloads, a computer has got infected with what I believe to be an adware. I have located the file, VirusTotal gives this ...
1
vote
2answers
161 views

Getting rid of trojans on Windows XP - the basic toolkit

I haven't had to clean up PCs in a while but it's this time of the year when you go visit relatives and they ask you about this and that, malware and trojans and other delicious things that pop up in ...
3
votes
1answer
535 views

I accidentally installed an adware filled Firefox [solved]

I installed Firefox using a download site, rather than the correct site. After running and installing Firefox I noticed my Chrome had an addon called swift browser added to it by a third party. After ...
5
votes
1answer
2k views

Identifying the source of a Crypto Locker attack

We believe a Crypto Locker virus may have found its way into our network. We're having trouble identifying which computer was responsible for originally bringing the virus in. Does anybody have any ...
2
votes
1answer
1k views

Can you get rid of the ZeroAccess botnet without a complete reinstall? [duplicate]

I'm interested in the recommended course of action for when you find a (Windows) system infected with the ZeroAccess botnet. I've seen various blog posts online recommending that the user download ...
2
votes
2answers
311 views

Manual Checks for Signs of Infection on Windows 7

Suppose I wanted to run some manual checks to see if my Windows 7 machine has been infected. I don't usually do anything to get it infected, but I would like to check whether the below steps are ...
1
vote
1answer
856 views

Orbit Downloader botnet program removal [solved]

Recently (shortly after midnight on 10/8/2013) I installed and ran Orbit Downloader. After learning that the latest version (4.1.1.8) has a botnet-like module included I immediately stopped the ...
2
votes
3answers
2k views

Malware not showing up in virus scan

I have some malware on my computer at work that I'm having a hard time getting rid of. I'm only interning there over the summer, so I'm guessing that it was downloaded by the previous user because I ...
2
votes
2answers
231 views

If a user visited a malicious website a year ago, should we nuke from orbit to be safe?

A Microsoft Security Essentials virus scan just finished on one of our computers and it shows two potential threats in Internet Explorer's temporary internet files: Web page with Black Hole Exploit ...
5
votes
1answer
3k views

Unable to get rid of Sality on my Dropbox

The story... As a group of rookie security researchers who deal with malwares, viruses etc., me and my team-mates sometimes do commit mistakes in handling the binaries. And so, I ended up infecting ...