Tagged Questions

A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.

learn more… | top users | synonyms

3
votes
2answers
205 views

Why some antiviruses detect viruses and some not?

I am curious why some anti-viruses detect viruses and some do not. From what I found online, antiviruses parse the binary files and check the sequence of code which is malicious(exists in virus ...
1
vote
3answers
238 views

How isolated are 2 operating systems on 1 harddisk?

Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they? I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
3
votes
5answers
2k views

Strange android app … possibly a mass malware?

I started receiving on my android Samsung Galaxy note strange notifications in Mandarin (the language of the people of china). Once I click on the notification it opens my browser with a blank page ...
17
votes
7answers
803 views

How to deal with a person who gets easily fooled by internet and mail scams?

alternative title: How to deal with a person who has gotten paranoid and doesn't want to go online anymore? A person, who has over the years been scammed many times, by bad spam/fraud emails, and ...
2
votes
2answers
581 views

keylogger detection by listening network

It is known that malware often uses keyloggers. Also some viruses aren't detected by antiviruses, therefore some viruses, especially APTs could stay in a system for so long without any detection. What ...
2
votes
5answers
330 views

Safer way to access paypal, Mobile or Pc?

I often find it difficult to chose if it is safer (in any context) to log in to my paypal, or other similar banking accounts using my Nokia or my PC. Maybe, I am assuming the fact, that since I do ...
3
votes
2answers
2k views

Is there any decompiled source code for the “Flame”/“Skywiper” malware?

When searching for the source for Stuxnet, its relatively easy to come by in one form or another. Although I'm actually curious if anyone has done any work to comment the source and perhaps clean up ...
4
votes
1answer
580 views

A couple of redirects after clicking in a link, what are they after?

I got an mass email from an friend containing only this link (made not clicable on purpose): http://www.casadelapiedra.com/components/com_content/id876757355.php I imagine she is got some kind of ...
1
vote
2answers
2k views

How is it possible that a virus can infect the system if the browser is started with non-admin rights

If I open my web browser (for example firefox) in Windows 7 with activated UAC as normal user (non admin) a virus - which uses a security leak in my browser - will only gets privileges of the normal ...
2
votes
3answers
415 views

How hard it would be to infect a system with malware through a portable web browser

If I use a portable web browser on a USB device like Google Chrome Portable how hard it would be to get infected by a malware/virus in the system to which the USB device is connected? Google Chrome ...
6
votes
2answers
222 views

Process authentication for Linux

Is there any possibility to authenticate a running process in Linux to be sure that this is the original/right one? I know that an Linux operating system is only that secure like the way you use it. ...
3
votes
6answers
2k views

Why do some antivirus programs find infections that others miss?

I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up. In scanning my system with ...
1
vote
1answer
142 views

How does window.w3ssss hack occur

Recently a .Net MVC 2 application on our server was infected with a virus / hack, it added some Javascript to the index.aspx pages of the site. While we have cleaned it up, I have not been able to ...
19
votes
3answers
1k views

Are older viruses removed from virus definition files?

Antivirus software receives constant updates in the form of virus definition files, containing the patterns used to identify viruses. It is a feature present on most (if not all) major AV for at least ...
1
vote
2answers
404 views

Where does mutation engine resides in Metamorphic \polymorphic viruses?

I was reading about Metamorphic & polymorphic viruses .. to what i understood ; they both uses mutation engines to avoid detection by anti-viruses, as the polymorphic encrypts\decrypts its code ...
2
votes
3answers
141 views

Is possible to know if increased marketshare means more viruses?

I'm having an argument with other developers about why more "viruses" exist (including all forms of external attacks, exploits, etc) in Android vs iOS. Like with Windows vs *nix, the main idea is that ...
0
votes
1answer
192 views

is there any program that can tell me which files have been transferred from my computer thru the web

Is there a program that can tell me which files have been transferred from my computer thru the web? So if I have virus on my computer that transfer files I will know about it according to the files ...
5
votes
6answers
647 views

How can a novice find proof of a system compromise?

I am almost certain a colleague has installed a keylogger on my system. I am totally new to IT security, but have substantial linux / windows / programming experience. The system I believe is ...
3
votes
1answer
230 views

Potential services.exe infected file?

I was asked by a coworker to help solve a problem with a remote client site through VNC. Immediately after connecting I've started noticing some strange behaviors that I am lead more and more to ...
1
vote
2answers
229 views

Dealing with a (possible) virus on both MacOSX and iOS

The symptom: On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page. On iPhone, when navigating to google.com I get ...
2
votes
3answers
145 views

How to tell what viruses are covered by your anti-virus software

One of our corporate twitter accounts recently started sending out DMs to its followers. Looking at the content of these it seems we'd become infected with Troj/Mdrop-EML. All computers on our ...
7
votes
2answers
234 views

How serious is a local virus in terms of network security

My colleague got a notification on his machine of a possible virus (through the virus scanner that is installed by default on all machines). He called up the tech department, and they simply told him ...
2
votes
4answers
518 views

Virus won't be picked up by Antivirus tools

Today we found a virus / trojan on our network which has thus far: Hidden all files and folders Replaced the hidden files and folders with executables of itself, with matching icons, and renamed ...
3
votes
3answers
333 views

I found a malicious website embedded in Malware spam. What should I do?

An email is using social engineering to get users to click on a malicious URL that downloads javascript and then runs malicious code. Who should I report these malicious URLs to? (Microsoft ...
4
votes
3answers
947 views

what is the difference between boot-sector virus and rootkits?

I have read the definition for both and also read about a few examples for both the cases. I'm still not very sure what the difference is. Is the difference blurred or are there some specific ...
8
votes
2answers
11k views

Advice on what to do after being hacked?

After running a system scan earlier today, I found that my computer had been infected by a trojan horse. My reason for running the scan was because Windows kept shutting down and then recovering. ...
1
vote
2answers
242 views

anti virus acting up/DNS poisoning

I was running my desktop and the AV deleted a file that it said was a virus (this was not during a scan, just normal usage). Now I'm just browsing the web and I got a couple of DNS poisoning attacks ...
1
vote
4answers
192 views

Infection I can't shut down, disguises process as scvhost.exe [closed]

A little while ago my home machine got hit and I was able to clean out just about everything except this one process. I can't find the origin but it shows in my process manager as scvhost.net by the ...
1
vote
1answer
129 views

Where can I find documented details of virus so that I might be able to find out why I am infected?

My AV detected that some computers in our network are infected with Win32.Sality.Y. Is there any good place I can find the documented details of this virus, so that I can (generally) how the virus ...
1
vote
3answers
186 views

Where can I find information on existing viruses?

As part of my research, I have created a small malware corpus which I'm conducting my tests against. I would like to categorize them based on Metamorphic / Polymorphic / etc. I am not sure if this is ...
2
votes
2answers
359 views

Safety of opening .txt files via URL

If I'm given a URL that points to a .txt file, is it always safe to open it? Can it possibly contain virus or malicious content?
1
vote
0answers
828 views

Why do complex viruses tend to be written in assembly? [closed]

For example Simile is extremely complex and is written in assembly. If something is going to be complicated isn't it best NOT to write it in assembly?
3
votes
1answer
439 views

Backdoor.ASP.Ace.C keeps showing up and being removed by f-secure

Backdoor.ASP.Ace.C is being found and removed from: C:\Users[username]\AppData\Local\Temp[randomstring] We have recently found some malicious aspx files on our IIS server that we have studied and ...
16
votes
5answers
964 views

Why would a virus writer bother to check to see if a machine is infected before infecting it?

I was looking at the tripartite structure of a virus, and it seems to check to see if a computer is infected before infecting it with the virus. Would this be an attempt to use files that are already ...
19
votes
4answers
2k views

Are anti-virus companies companies regularly committing software piracy?

As Mikko Hypponen highlighted in a recent tweet, anti-Virus companies collect and store both samples of malicious software and samples of legitimate software: This got me to thinking, what ...
-1
votes
2answers
7k views

Malware or buggy software gives Low Disk Space warning

Since a few days, I am getting an alert that in my c drive disk space is low. When I verified, free space in my c drive was decreasing hour by hour and there was a stage when it simply said that 0 mb ...
3
votes
2answers
149 views

How could one avoid virus infection via software updates

Almost all useful software get updated with time. Operating system updates, I "guess", might be less stringently checked by the normal anti-virus programs, since their sources could be considered to ...
3
votes
2answers
400 views

How to practically detect current system net traffic?

I know that some viruses or trojans can install rootkits or bootkits to change system's normal behaviour; AFAIK for example filter queries for running processes or even hide active TCP ports. My ...
5
votes
6answers
6k views

Can i get 100% protection from virus by using Deep Freeze?

I have recently installed an application called 'Deep Freeze' that works by "freezing" the state of an operating system and working off delta disks. Rebooting deletes the deltas and reverts back to ...
3
votes
4answers
376 views

Has any virus attempted to compromise the anti-virus database?

I was using an old version of Norton Anti Virus and the Live Update wouldn't run. The solution was to rename a file. This got me thinking if a virus could replace an anti-virus database with it's own ...
20
votes
2answers
804 views

Cohen's problem

Fred Cohen determined theoritically that viral detetction is an undecidable problem. Can anyone provide an intuitive reasoning for that? Background Fred Cohen experimented with computer viruses ...
4
votes
1answer
3k views

What can I do to make sure my computer isn't infected with FinSpy?

What steps have been taken by common free software OS distributions to protect against it? What can Windows users do? What ways are there to rid a system of it?
2
votes
2answers
9k views

How does Remote Access Trojan / Backdoor Software work?

How does the RAT works? I understand it as once we surf the infected website, browser might download the trojan to our PC automatically. Will it executed and auto install in our computer? I can't ...
1
vote
1answer
78 views

Two questions regarding Mixor worm

According to Symantec's write up "it also infects .exe and .scr files in folders containing [RANDOM CHARACTERS].t". What if one of the .exe/.src files is run on the same computer - then all the ...
6
votes
3answers
6k views

Is it possible for a phishing link to install a major virus on a Mac?

My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
13
votes
6answers
4k views

Finding a specific malware sample for malware analysis purposes

I wish to analyze the changes made by a specific virus. For example, Win32.Sality. Where can I get the sample of this, or other similar, malware for testing?
3
votes
5answers
1k views

How can I know if my PC is getting infected?

I have installed an antivirus, but as no antivirus is perfect, what can I do to diagnose if my PC is getting infected? For example, keeping a close eye on what programs and tasks run when I turn my ...
0
votes
2answers
233 views

How could an AV detect a virus that has a chance of not decrypting itself?

If I understand this correctly there is a chance the virus may not decrypt itself at all. How could an AV catch this? In some cases, the decryptor may start with a header whose intent is not ...
0
votes
1answer
317 views

Virus developers groups [closed]

Are there any groups of virus developers around anymore? Like 29A group and bunch of other groups few years ago. They never released their codes, never used then to steal data etc.
42
votes
6answers
4k views

Virus Encoded in Video

So I'm not familiar at all with IT Security, but I'm a bit curious about something. I was watching a TV show and at one point, a virus spreads through an office. They investigate and find out that the ...