A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.

learn more… | top users | synonyms

4
votes
1answer
2k views

Unable to get rid of Sality on my Dropbox

The story... As a group of rookie security researchers who deal with malwares, viruses etc., me and my team-mates sometimes do commit mistakes in handling the binaries. And so, I ended up infecting ...
5
votes
2answers
572 views

I found a virus on my USB stick. Now what?

I discovered a file, named autorun.ini on my USB flash drive: [AutoRun] ;FjYfoT ;jpId UagEbddsb PCjo oPEn = efhcnu.exe sheLl\open\DEfault=1 ;utvDpsMqpT dDustbemW XyAy WeywFbvaVA eQnK ...
5
votes
4answers
3k views

How does a trojan like Trojan:JS/BlacoleRef.BV infect a website?

Today I find out my website is infected with Trojan:JS/BlacoleRef.BV. The server is a shared server from a hosting company. How does a trojan like this get on the webserver?
-1
votes
2answers
183 views

Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]

Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
7
votes
4answers
12k views

Security issues with allowing Dropbox installations on client PC's in our organisation

Does anyone know if there is any good reasons not to allow Dropbox installations on our client PC's? All the PC's have antivirus installed and running. I know it is an additional attack vector to ...
6
votes
2answers
382 views

Statistics on purposes of viruses/malware

Are there any resources that analyze the purpose or goal or the major viruses/malware out in the wild today? For example, what percentage are used to construct botnets (for DDoS or something else)? ...
0
votes
1answer
580 views

csrss.exe process

I've experienced some odd behavior lately (cookies being cleared in Firefox, forcing me to log in again). Antivirus scans (MS Security Essentials, MalwareBytes) aren't showing anything, but Process ...
2
votes
2answers
831 views

New Undetected Virus?

I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example: Before: Partition T:\ ...
-1
votes
1answer
139 views

Windows “Send to compressed file” creates an image? [closed]

One of my friends windows laptops (which I don't have access to right now) has in the recent past had a virus (where .doc files were converted to .exe files) which we dealt with. Now when she ...
5
votes
5answers
1k views

Windows 2003 Enterprise infected by Conficker; post-infection problems continue

I used various tools to remove Conficker, and I pretty much succeeded, but I've had recurring problems afterward. It won't update anymore (with the following error message: 0x800706B5) I tried ...
0
votes
2answers
2k views

What is the meaning of .ini file in startup folder?

Now my windows 7 is too slow and crashing usually. I checked the start up folder. I get a file with extension .ini. The content of file is [.ShellClassInfo] ...
4
votes
4answers
756 views

Site constantly getting infected

I am the webmaster of some websites running Typo3, 2 of which are getting infected constantly. These 2 sites are being owned by the same client. Something happens on those 2 sites that causes ...
3
votes
2answers
339 views

Can a virus infect source code files with dangerous data?

If a user was infected with a file altering virus is it possible that checked in code (files containing text) to the source control could contain dangerous properties. I ask this after this got me ...
1
vote
1answer
383 views

I think I downloaded spyware from an ad on tortoise-svn site

The other day in a rush to quickly download and install tortoise svn, I accidentally clicked on a big download button on an ad on their site and installed something that I don't see on my computer. ...
1
vote
2answers
392 views

Where does mutation engine resides in Metamorphic \polymorphic viruses?

I was reading about Metamorphic & polymorphic viruses .. to what i understood ; they both uses mutation engines to avoid detection by anti-viruses, as the polymorphic encrypts\decrypts its code ...
1
vote
2answers
448 views

Brute force a GUI login?

I know I have read somewhere that the reason the UAC prompt in Windows 7 was employed is that viruses that would supposedly execute privileged instructions won't be able to "click" the confirm button ...
3
votes
2answers
202 views

Why some antiviruses detect viruses and some not?

I am curious why some anti-viruses detect viruses and some do not. From what I found online, antiviruses parse the binary files and check the sequence of code which is malicious(exists in virus ...
3
votes
6answers
2k views

Why do some antivirus programs find infections that others miss?

I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up. In scanning my system with ...
6
votes
2answers
218 views

Process authentication for Linux

Is there any possibility to authenticate a running process in Linux to be sure that this is the original/right one? I know that an Linux operating system is only that secure like the way you use it. ...
2
votes
2answers
554 views

keylogger detection by listening network

It is known that malware often uses keyloggers. Also some viruses aren't detected by antiviruses, therefore some viruses, especially APTs could stay in a system for so long without any detection. What ...
2
votes
5answers
321 views

Safer way to access paypal, Mobile or Pc?

I often find it difficult to chose if it is safer (in any context) to log in to my paypal, or other similar banking accounts using my Nokia or my PC. Maybe, I am assuming the fact, that since I do ...
6
votes
2answers
245 views

How does the predator network prevent outside control by an attacker?

I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus. Does this command and control system communicate with the ...
4
votes
1answer
574 views

A couple of redirects after clicking in a link, what are they after?

I got an mass email from an friend containing only this link (made not clicable on purpose): http://www.casadelapiedra.com/components/com_content/id876757355.php I imagine she is got some kind of ...
2
votes
3answers
403 views

How hard it would be to infect a system with malware through a portable web browser

If I use a portable web browser on a USB device like Google Chrome Portable how hard it would be to get infected by a malware/virus in the system to which the USB device is connected? Google Chrome ...
1
vote
2answers
2k views

How is it possible that a virus can infect the system if the browser is started with non-admin rights

If I open my web browser (for example firefox) in Windows 7 with activated UAC as normal user (non admin) a virus - which uses a security leak in my browser - will only gets privileges of the normal ...
12
votes
5answers
814 views

Detection and analysis of unknown malware

Suppose I have a binary which is suspicious. How can I determine whether it is malicious, and if it is, reverse-engineer how it works and what it does? For example, maybe using static analysis? Are ...
2
votes
4answers
735 views

Detecting malware hidden in P2P traffic

Consider a network situation involving (only) Peer to Peer traffic in medium sized network. For the sake of convenience, a simple P2P application like DC++ may be assumed, although I am aiming at a ...
1
vote
1answer
142 views

How does window.w3ssss hack occur

Recently a .Net MVC 2 application on our server was infected with a virus / hack, it added some Javascript to the index.aspx pages of the site. While we have cleaned it up, I have not been able to ...
5
votes
6answers
628 views

How can a novice find proof of a system compromise?

I am almost certain a colleague has installed a keylogger on my system. I am totally new to IT security, but have substantial linux / windows / programming experience. The system I believe is ...
2
votes
3answers
140 views

Is possible to know if increased marketshare means more viruses?

I'm having an argument with other developers about why more "viruses" exist (including all forms of external attacks, exploits, etc) in Android vs iOS. Like with Windows vs *nix, the main idea is that ...
0
votes
1answer
192 views

is there any program that can tell me which files have been transferred from my computer thru the web

Is there a program that can tell me which files have been transferred from my computer thru the web? So if I have virus on my computer that transfer files I will know about it according to the files ...
8
votes
6answers
732 views

What is preventing the widespread common use of MAC-type systems?

Overall question what is preventing the uptake of MAC systems such as SELinux/AppArmor in corporate and desktop computing environments? Why don't you think it isn't already widespread? I do not ...
3
votes
1answer
221 views

Potential services.exe infected file?

I was asked by a coworker to help solve a problem with a remote client site through VNC. Immediately after connecting I've started noticing some strange behaviors that I am lead more and more to ...
3
votes
5answers
1k views

How can I know if my PC is getting infected?

I have installed an antivirus, but as no antivirus is perfect, what can I do to diagnose if my PC is getting infected? For example, keeping a close eye on what programs and tasks run when I turn my ...
1
vote
3answers
185 views

Where can I find information on existing viruses?

As part of my research, I have created a small malware corpus which I'm conducting my tests against. I would like to categorize them based on Metamorphic / Polymorphic / etc. I am not sure if this is ...
1
vote
2answers
229 views

Dealing with a (possible) virus on both MacOSX and iOS

The symptom: On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page. On iPhone, when navigating to google.com I get ...
2
votes
3answers
144 views

How to tell what viruses are covered by your anti-virus software

One of our corporate twitter accounts recently started sending out DMs to its followers. Looking at the content of these it seems we'd become infected with Troj/Mdrop-EML. All computers on our ...
6
votes
3answers
6k views

Is it possible for a phishing link to install a major virus on a Mac?

My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
2
votes
4answers
503 views

Virus won't be picked up by Antivirus tools

Today we found a virus / trojan on our network which has thus far: Hidden all files and folders Replaced the hidden files and folders with executables of itself, with matching icons, and renamed ...
5
votes
1answer
393 views

How antivirus companies create virus defnitions for new outbreaks

This question quite amazes me. I dont understand how antivirus companies get info about the latest viruses. have they installed some kind of filters to monitor the internet traffic ? Or they are ...
13
votes
4answers
1k views

How is a worm different from a virus?

In spite of various online articles, I'm a bit unclear on the distinction between a "worm" and a "virus". Two related questions-- Is there a useful and clear distinction here or no? If so, what is ...
3
votes
3answers
327 views

I found a malicious website embedded in Malware spam. What should I do?

An email is using social engineering to get users to click on a malicious URL that downloads javascript and then runs malicious code. Who should I report these malicious URLs to? (Microsoft ...
4
votes
3answers
905 views

what is the difference between boot-sector virus and rootkits?

I have read the definition for both and also read about a few examples for both the cases. I'm still not very sure what the difference is. Is the difference blurred or are there some specific ...
1
vote
2answers
234 views

anti virus acting up/DNS poisoning

I was running my desktop and the AV deleted a file that it said was a virus (this was not during a scan, just normal usage). Now I'm just browsing the web and I got a couple of DNS poisoning attacks ...
1
vote
4answers
187 views

Infection I can't shut down, disguises process as scvhost.exe [closed]

A little while ago my home machine got hit and I was able to clean out just about everything except this one process. I can't find the origin but it shows in my process manager as scvhost.net by the ...
1
vote
1answer
127 views

Where can I find documented details of virus so that I might be able to find out why I am infected?

My AV detected that some computers in our network are infected with Win32.Sality.Y. Is there any good place I can find the documented details of this virus, so that I can (generally) how the virus ...
3
votes
1answer
410 views

Backdoor.ASP.Ace.C keeps showing up and being removed by f-secure

Backdoor.ASP.Ace.C is being found and removed from: C:\Users[username]\AppData\Local\Temp[randomstring] We have recently found some malicious aspx files on our IIS server that we have studied and ...
7
votes
2answers
7k views

Is Buzzdocks a security threat?

A BuzzDock toolbar suddenly appeared in my Chrome browser. I definitely did not install it nor do I remember installing any crapware. It is not unknown to the internet community (Example 1, Example ...
2
votes
2answers
353 views

Safety of opening .txt files via URL

If I'm given a URL that points to a .txt file, is it always safe to open it? Can it possibly contain virus or malicious content?
2
votes
3answers
830 views

How to do a virus scan before post attachments in asp.net application

How to do a virus scan before post attachments in asp.net application,when they find a virus on to give up post attachments,otherwise proceed to upload. I wonder if there are any APIs out there where ...