A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.
2
votes
2answers
191 views
Possible trojan/virus in memory?
I've extracted objects (JPEGs) from processes` memory dumps (obtained with memdump command from volatility framework) and got strange results after searching the memory pages of the main thread of ...
1
vote
2answers
219 views
Why does Antivirus Softwares have an Issue with EXE Packers
Im trying to pack an Executable using an Exe Packer like UPX.I packed and checked the File with VirusTotal.com.Here some 9 Antivirus Products say its a Virus actually its a harmless exe.I think the AV ...
3
votes
2answers
852 views
How to detect a virus in a network card?
How can I know that a network card in a server was infected by a virus or not? Are there any methods to check it?
3
votes
5answers
494 views
Clicked on fake “Download Now!” ad on file transfer site (legal file for legit purposes) by accident; does anyone know what measures I should take?
I was sent a file by a coworker via "sendshare" - my first time using the service. The page loaded a bit slowly and the ads came in before the actual download link. I was in a hurry to get the file - ...
6
votes
4answers
481 views
Is there any chance PHP developers themselves implement backdoors in PHP core?
This is not a concern that I personally have,no! In my job environment I've heard from programmers and non programmers that PHP developers always put secret backdoors in PHP that no one has access to ...
0
votes
2answers
704 views
Will virus downloaded to guest OS affect Host OS? [duplicate]
Possible Duplicate:
How secure are virtual machines really? False sense of security?
If I download a file in Guest Windows XP machine in Vmware Workstation, which is a virus. Can it affect ...
3
votes
3answers
647 views
How can winlock virus change Windows Registry without admin permission?
When you try to install program you'll always asked about administrator permission. Same thing when you try to user 'regedit' command.
So I'm interested in how does this virus works. How can it edit ...
1
vote
2answers
362 views
AVG Website Scan, Chance of 'Potential Threat'?
In a recent question I asked about investigating websites for viruses.
The answers were very helpful, I ended up using the AVG website scanner. First I used it on our website and found it was clean, ...
2
votes
2answers
657 views
How to check if a website is sending out a virus?
I'm a webmaster at a company without much knowledge of IT Security. We are running 6 computers connected to a central server that also hosts our website.
3 out of 6 people in the office have gotten ...
-2
votes
2answers
193 views
Will winlock virus really delete information after 12 hours? [closed]
I've got virus which tells that all data will be deleted after 12 hours. I cleaned autorun and now scaning my computer with anti-virus, but still is this message just to scary people or is this virus ...
2
votes
3answers
547 views
Cleaning a virus by mounting the infected hard disk on another machine?
I have a laptop that has been infected with a virus.
I am thinking of taking the disk out of the laptop, putting it into an external disk enclosure, and connecting it to a second laptop so I can run ...
-1
votes
1answer
376 views
Can a website infect a computer without the user's assistance? [duplicate]
Possible Duplicate:
Can you get virus just by visiting a website in chrome
I have a hard time believing that drive-by downloads can actually happen without a user's assistance (e.g. without ...
2
votes
3answers
716 views
Writing a sample virus (not harmful)
I don't know if such a question is allowed on this site, sorry if it's not
For educational purposes I am asked to write a small virus running on Linux, which should just be able to inject itself into ...
1
vote
0answers
108 views
Hidden Registry Strings - possible rootkit? [closed]
Win server 2003 R2 SP2 - no noticeable issues on the machine. When I create new strings in regedit, I hit refresh and they are gone! I try to re-add and it complains the string already exists.
I am ...
2
votes
2answers
174 views
How can I protect content distributed on a linux virtual machine?
What assets am I trying to protect?
An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
3
votes
4answers
588 views
Cleaning pendrive without infecting
I'm using Ubuntu without ever (knowingly) having had any virus issues.
Recently I put a usb pen in a computer in a print shop, and their Windows machine told me that it was infected. I would like to ...
2
votes
1answer
206 views
FireFox Download Source
While downloading the latest version of Firefox for Mac, i took a peek at the source. The names don't look legit but i am not that familiar with how CDNs work.
I hit download multiple times and ...
2
votes
2answers
3k views
What are these ip adresses my computer is connected and how do I block them if they are malicious? [closed]
When I execute a netstat command i see several ip-adresses that have connection to my pc and I don't what they are for. These are the ip's.
TCP 192.168.1.20:1042 fa-in-f125:5222 ...
1
vote
1answer
626 views
Has my Mac been compromised? [closed]
I am running NOD32 on a Mac running Leopard 10.5.8. When I visited a website, NOD32 automatically detected it as a virus. For some reason I was taken to bing.com and I got a "page not found" error. ...
7
votes
3answers
413 views
How effective is something like Deep Freeze against boot sector infections?
I work for an embedded system manufacturer and on our older generation systems, which are powered by Windows Embedded, a number of customers have been experiencing virus infections. Due to the real ...
6
votes
2answers
374 views
How might an email do damage merely by being opened?
E.g. http://www.dailymail.co.uk/sciencetech/article-2094982/Threat-new-virus-infected-emails-PC-DONT-open-attachments.html?ito=feeds-newsxml
Assuming that the user clicks no links and opens no ...
2
votes
1answer
111 views
Is there a tool that puts on a webserver some .html or .php files filled with popular malware like java drive-bys or other browser exploit payloads?
As mentioned in the title I'm looking for a tool that puts on a webserver some .html or .php files filled with popular malware like java drive-bys or other browser exploit payloads? Maybe there is ...
0
votes
1answer
259 views
Iframe hack / done through FTP?
On two websites which I host for a friend, I found that there is an iframe at the bottom of each site's index.htm file.
<iframe src="http://www.kunstsalen.dk" width=1 height=1
style="visibility: ...
2
votes
3answers
372 views
Is it possible for a virus or unknown program to automatically start up a webcam
How can I secure my computer more, knowing these days that there are many websites, especially ones where you don't have to even click before a virus is downloaded straight to your hard-drive.
I ...
2
votes
2answers
220 views
ltd.exe, “Vista Antivirus Security 2012”, any info?
I was taking a look at someone's computer who had a virus. It called itself "Visa Antivirus Security 2012". It turned out to be ltd.exe. It would seemingly randomly block programs, it turns out it had ...
0
votes
2answers
312 views
Online virus scanning service with remote file submission?
I have some links that contain hacking tool and whatnot and I want to pass them to a virus scanning service. The thing is that I don't want to download them to my pc and upload them to their service, ...
3
votes
1answer
2k views
What is Win32/Kryptik.FM?
ESET detected this trojan, but I cannot find any information on the Internet on what it is. Google is only returning links on how to remove it, or what files have been detected to contain it.
...
5
votes
4answers
3k views
how to protect my USB stick from Viruses
I repair a lot of computers with viruses, malware, and what not, and I have one problem that I am struggling to find a solution for. Whenever I connect my USB stick that has the tools I need for the ...
4
votes
3answers
243 views
Firewall says that a program that I'm developing is trying to connect to the Internet
I'm seriously confused about this, since the program is entirely developed by myself and has no means/functionality to connect to any network/the internet whatsoever.
I'm a software engineer but not ...
3
votes
1answer
388 views
Mac sending hundreds of packets to gateway
I've got a user on my work network who brings her personal laptop (macbook) in for work. They've been having some horrendously slow network issues on everything past that hub, so I did some packet ...
3
votes
4answers
260 views
What is the purpose of EICAR?
For as long as can remember, EICAR has been used to test for the presence of Antivirus systems in email, the file system, or other places.
Sometimes the AV solution is so far out of date, that its ...
3
votes
1answer
147 views
Finding an up to date website with detailed information on viruses
Is there a website with the ability to search through viruses that will return detailed information on them? I can't seem to find one and I'm tired of only getting forums when I search for a specific ...
13
votes
4answers
1k views
What is the corrupted image vulnerability? How does it work?
What exactly happens when someone injects malicious binary code into an image file (on Windows)? How is that done?
13
votes
4answers
11k views
How to inject executable, malicious code into PDF, JPEG, MP3, etc.?
I wanted to know if its generally possible to inject executable code into files like PDFs or JPEGs etc., or must there be some kind of security hole in the application?
And if so, how would one do ...
13
votes
2answers
2k views
How does a crypter for bypass antivirus detection work?
I am talking about crypters used to encrypt files like viruses and keyloggers for the sole purpose of bypassing antivirus detection. How do they work?
8
votes
3answers
866 views
Am I protected from USB autorun malware on Windows 7?
As far as I know, the autorun.inf problem (the possibility of automatically executing code when a USB stick is plugged in) was solved through Windows Updates for XP, and on 7 it is no longer possible ...
2
votes
3answers
338 views
How do I ensure that my computer is 100% worm-free?
Ok say I have a brand new laptop that was is brand new.
Is it true to say that as long as I keep the bluetooth turned off, and I am not connected to the internet, and only copy files that are 100% ...
4
votes
2answers
807 views
Virus detection with Process Explorer
Can Process Explorer ( Windows apparently) detect a virus? Is it even possible?
6
votes
2answers
195 views
What implications does IPv6 have for internet worms and script kiddies?
Though IPv6 is not here yet it one day we will all lose our familiar IPv4 addresses and be communicating over the internet solely with IPv6 addresses.
What interests me is the implications this has ...
10
votes
6answers
1k views
Can viruses actually inject their code in other processes?
Can a virus really inject its own code into a process so it stays on your computer permantly? The only way to actually remove it is to reinstall your OS. My question is how can it do that without ...
5
votes
2answers
296 views
What is a Flash drive by download?
I've seen many people saying how some sites can infect your computer without actually clicking anything. They said that it was a "Flash Drive By" and it would use flash to download a file of any kind. ...
25
votes
2answers
3k views
What malicious things can happen when clicking on links in email?
I've received a spam from one of my friends (well I'm sure he didn't send it). so there's this link, and i'd thought what exactly would be the implications of clicking the link (i've not clicked it ...
2
votes
2answers
164 views
What steps can I take to identify what type of compromise of my computer has occured
I got involved in a strange scenario today :-) . Some 'UDPAgent.exe' file/worm/virus was trying to access my collegue's system and the antivirum program was showing that this particular thing is ...
5
votes
3answers
226 views
Some good resources on viruses/worms?
I am searching good info on sophisticated viruses/worms. One example would be STUXNET and the very good analysis made by folks from Symantec. Any ideas?
2
votes
2answers
244 views
Where can I find some “real time” discussion forums for security issues?
The place where I work was hit by the new Qakbot variant (3rd generation) a couple of days ago and it has been brutal. Unfortunately a lot of the documentation out there is from the 1st iteration of ...
2
votes
1answer
284 views
Can anyone give me more info on this sketchy url I recently visited, is it an attack site?
My girlfriend was browsing images on google when suddenly her browser redirected to this url:
defender-iies.co.cc/scan3/167
The site seemed to be posing as an anti virus, saying your computer is at ...
5
votes
4answers
520 views
Is disabling auto-run enough to protect against malicious code from removable media automatically infecting a machine?
If I block auto-run on a windows machine, is this enough to protect it from malicious code (assuming I don't run any files manually)?
Or are there known vulnerabilities that may cause infection?
6
votes
3answers
321 views
Malware nomenclature
If there a generally agreed upon naming convention for types of malware/virus? For example, are there agreed upon terms for virus, trojan, worm and the like?
If one exists could someone explain it or ...
5
votes
2answers
497 views
Recently had a virus, can I use backed up files on clean system?
I had to reinstall my OS (windows) recently due to a virus. I backed up my source files onto a flash drive. How can I get to those files without problems? I know flash drives can have nasty things in ...
