A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.

learn more… | top users | synonyms

1
vote
3answers
361 views

Text changing virus

Can malware change words that I have typed and then saved in the computer'? If so, how likely is this?
1
vote
1answer
182 views

Scan Source Code for Potential Viruses

If you are sent a program written by someone so that you have the complete source code, how would you go about scanning the source code for any potential viruses/malware? Note: While bugs and ...
2
votes
1answer
1k views

Can a file .exe.part already have caused damage?

If on a Windows machine, an antivirus program has found a Win32:Rootkit in a file ...\Temp\...\xy.exe.part, could the file possibly already have caused damage or not given that it seems to be an ...
0
votes
0answers
22 views

Creating unnecessary shortcuts on flash drive [duplicate]

Recently my computer has been infected by a strange kind of virus(may be) that hides all the files and folders of flash drive and created the shortcuts to them instead. The shortcuts are though ...
0
votes
1answer
97 views

Java is running even after it is disabled [closed]

To prevent adds and pop-up that seduce users to install or download viruses I have disabled Java. But I have noticed that even with Java disables Firefox is still running it. The pop-ups are coming ...
1
vote
2answers
325 views

Can malware come in any format?

After reading @Iszi's answer to this question he states Viruses attached in e-mails do not only come in .EXE files. They can be any form of document - PDF, PPT, DOC, XLS, SWF, etc. Are there ...
1
vote
1answer
941 views

Uploading images safe of XSS, php code and virus

I know that my question has been responded lot of times, but most the responses addresses functions that I don't even use (like use include with images) and that makes me worry because maybe I'm not ...
20
votes
6answers
3k views

Malicious Links that Respond to Browsers but not curl or wget

There are some emails with links to people's cracked websites with a malware download Like this kind of email: fake DHL pack station email ... the links often take the form of: http:// ...
2
votes
3answers
1k views

How can winlock virus change Windows Registry without admin permission?

When you try to install program you'll always asked about administrator permission. Same thing when you try to user 'regedit' command. So I'm interested in how does this virus works. How can it edit ...
8
votes
3answers
537 views

Can I use the same keyboard on both my infected and non-infected computers?

I have a computer which is virus infected. Can I use the same keyboard on both it and a "safe/clean" computer without fear? Keyboards these days seem to come with built in software and thus must ...
5
votes
6answers
5k views

Can i get 100% protection from virus by using Deep Freeze?

I have recently installed an application called 'Deep Freeze' that works by "freezing" the state of an operating system and working off delta disks. Rebooting deletes the deltas and reverts back to ...
1
vote
2answers
363 views

Where can I find some “real time” discussion forums for security issues? [closed]

The place where I work was hit by the new Qakbot variant (3rd generation) a couple of days ago and it has been brutal. Unfortunately a lot of the documentation out there is from the 1st iteration of ...
2
votes
3answers
612 views

Malware not showing up in virus scan

I have some malware on my computer at work that I'm having a hard time getting rid of. I'm only interning there over the summer, so I'm guessing that it was downloaded by the previous user because I ...
2
votes
1answer
898 views

Windows PE file and Malwares

Trying to understand how and why any virus, malware, worm and code injections are successful after all in a Windows Portable Executable format. I was going through the PE structure documentation, ...
19
votes
2answers
3k views

How does a crypter for bypassing antivirus detection work?

I am talking about crypters used to encrypt files like viruses and keyloggers for the sole purpose of bypassing antivirus detection. How do they work?
2
votes
2answers
138 views

If a user visited a malicious website a year ago, should we nuke from orbit to be safe?

A Microsoft Security Essentials virus scan just finished on one of our computers and it shows two potential threats in Internet Explorer's temporary internet files: Web page with Black Hole Exploit ...
5
votes
2answers
1k views

Why did Apple think OS/X was virus proof?

In such articles as this one at Examiner.com, we see that Apple had long "advertised" the immunity of its desktop OS to viruses. It had to dilute that assertion when the Flashback virus appeared. ...
13
votes
6answers
2k views

Finding a specific malware sample for malware analysis purposes

I wish to analyze the changes made by a specific virus. For example, Win32.Sality. Where can I get the sample of this, or other similar, malware for testing?
-3
votes
0answers
5k views

Free collection of virus test samples [closed]

You want to check functionality of your antivirus. virussign.com can do that for money. Is there a free virus base?
0
votes
1answer
312 views

Site Hacked - Where to go from here? [closed]

Our magento based e-commerce site was hacked over the weekend, the hackers managed to gain access to the magento files and embed some scrambled code into the get.php file in the root directory. I ...
10
votes
3answers
5k views

Do I really need an Anti-Virus software if I'm careful about where I browse?

A friend told to me the following: I don't use Anti-Virus software at all, I am just careful about where I go and what I click on. I've also heard this from other people as I've repaired their ...
8
votes
2answers
9k views

Advice on what to do after being hacked?

After running a system scan earlier today, I found that my computer had been infected by a trojan horse. My reason for running the scan was because Windows kept shutting down and then recovering. ...
3
votes
1answer
183 views

What is the security purpose behind the “enable editing” of MS Word?

Whenever I open MS Word documents from my email, they open in "Protected View" with edit options disabled by default. As per my understanding, the hyperlinks used in the main document would be linked ...
-1
votes
1answer
148 views

Malware persistence past a drive wipe? [duplicate]

Are there any known instances of malware persisting past a drive wipe and reinstall, through modified bios, or firmware on one of the machine components?
3
votes
4answers
820 views

Strange android app … possibly a mass malware?

I started receiving on my android Samsung Galaxy note strange notifications in Mandarin (the language of the people of china). Once I click on the notification it opens my browser with a blank page ...
4
votes
3answers
499 views

Virus with PGP Encryption Preventing Virus Scan

A user reported having a virus that was causing pop up windows asking for money. When he turned on his laptop and logged into PGP encryption (whole disk) the desktop quickly showed but then a white ...
1
vote
2answers
2k views

Somehow unexpectedly my computer got infected with malware

So I consider myself a pretty conscious computer user. I run Windows 7 SP1 Pro 64bit and I update it. For surfing on the web I use Firefox 20.0.1 - I keep it updated. I also have NoScript and AdBlock ...
4
votes
1answer
2k views

Unable to get rid of Sality on my Dropbox

The story... As a group of rookie security researchers who deal with malwares, viruses etc., me and my team-mates sometimes do commit mistakes in handling the binaries. And so, I ended up infecting ...
4
votes
2answers
527 views

I found a virus on my USB stick. Now what?

I discovered a file, named autorun.ini on my USB flash drive: [AutoRun] ;FjYfoT ;jpId UagEbddsb PCjo oPEn = efhcnu.exe sheLl\open\DEfault=1 ;utvDpsMqpT dDustbemW XyAy WeywFbvaVA eQnK ...
5
votes
4answers
3k views

How does a trojan like Trojan:JS/BlacoleRef.BV infect a website?

Today I find out my website is infected with Trojan:JS/BlacoleRef.BV. The server is a shared server from a hosting company. How does a trojan like this get on the webserver?
-1
votes
2answers
179 views

Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]

Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
7
votes
4answers
11k views

Security issues with allowing Dropbox installations on client PC's in our organisation

Does anyone know if there is any good reasons not to allow Dropbox installations on our client PC's? All the PC's have antivirus installed and running. I know it is an additional attack vector to ...
6
votes
2answers
374 views

Statistics on purposes of viruses/malware

Are there any resources that analyze the purpose or goal or the major viruses/malware out in the wild today? For example, what percentage are used to construct botnets (for DDoS or something else)? ...
0
votes
1answer
529 views

csrss.exe process

I've experienced some odd behavior lately (cookies being cleared in Firefox, forcing me to log in again). Antivirus scans (MS Security Essentials, MalwareBytes) aren't showing anything, but Process ...
2
votes
2answers
791 views

New Undetected Virus?

I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example: Before: Partition T:\ ...
-1
votes
1answer
136 views

Windows “Send to compressed file” creates an image? [closed]

One of my friends windows laptops (which I don't have access to right now) has in the recent past had a virus (where .doc files were converted to .exe files) which we dealt with. Now when she ...
5
votes
5answers
1k views

Windows 2003 Enterprise infected by Conficker; post-infection problems continue

I used various tools to remove Conficker, and I pretty much succeeded, but I've had recurring problems afterward. It won't update anymore (with the following error message: 0x800706B5) I tried ...
0
votes
2answers
2k views

What is the meaning of .ini file in startup folder?

Now my windows 7 is too slow and crashing usually. I checked the start up folder. I get a file with extension .ini. The content of file is [.ShellClassInfo] ...
4
votes
4answers
701 views

Site constantly getting infected

I am the webmaster of some websites running Typo3, 2 of which are getting infected constantly. These 2 sites are being owned by the same client. Something happens on those 2 sites that causes ...
3
votes
2answers
320 views

Can a virus infect source code files with dangerous data?

If a user was infected with a file altering virus is it possible that checked in code (files containing text) to the source control could contain dangerous properties. I ask this after this got me ...
16
votes
6answers
1k views

Why do malware creators use such clever technologies for such silly purposes?

Some days ago I got infected by a malware, probably something new and very clever, as it went in unstopped and no scanning tool was able to detect it afterwards (see this question). It was a ...
1
vote
1answer
373 views

I think I downloaded spyware from an ad on tortoise-svn site

The other day in a rush to quickly download and install tortoise svn, I accidentally clicked on a big download button on an ad on their site and installed something that I don't see on my computer. ...
1
vote
2answers
374 views

Where does mutation engine resides in Metamorphic \polymorphic viruses?

I was reading about Metamorphic & polymorphic viruses .. to what i understood ; they both uses mutation engines to avoid detection by anti-viruses, as the polymorphic encrypts\decrypts its code ...
1
vote
2answers
422 views

Brute force a GUI login?

I know I have read somewhere that the reason the UAC prompt in Windows 7 was employed is that viruses that would supposedly execute privileged instructions won't be able to "click" the confirm button ...
3
votes
2answers
199 views

Why some antiviruses detect viruses and some not?

I am curious why some anti-viruses detect viruses and some do not. From what I found online, antiviruses parse the binary files and check the sequence of code which is malicious(exists in virus ...
3
votes
6answers
2k views

Why do some antivirus programs find infections that others miss?

I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up. In scanning my system with ...
6
votes
2answers
206 views

Process authentication for Linux

Is there any possibility to authenticate a running process in Linux to be sure that this is the original/right one? I know that an Linux operating system is only that secure like the way you use it. ...
2
votes
2answers
525 views

keylogger detection by listening network

It is known that malware often uses keyloggers. Also some viruses aren't detected by antiviruses, therefore some viruses, especially APTs could stay in a system for so long without any detection. What ...
2
votes
5answers
299 views

Safer way to access paypal, Mobile or Pc?

I often find it difficult to chose if it is safer (in any context) to log in to my paypal, or other similar banking accounts using my Nokia or my PC. Maybe, I am assuming the fact, that since I do ...
6
votes
2answers
240 views

How does the predator network prevent outside control by an attacker?

I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus. Does this command and control system communicate with the ...