A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.

learn more… | top users | synonyms

2
votes
1answer
18 views

Server loaded with antivirus lets viral file go through

We have a .NET MVC website with a WCF Service as a service layer. One of the feature that the service offers is the ability to upload documents. When we asked our security consultant to test our ...
4
votes
1answer
40 views

How can I safely view the code of a VBA macro?

I have received a phishing email with the usual bogus bill in the form of a Word document. I am curious about what the probable virus wants to do so I would like to inspect the code. At the moment ...
-5
votes
0answers
92 views

Somehow hackers have used my email box to sign up me here!

I use same login name and password to many sites but this is strange, somebody used my email account to sign me up on stack exchange but also on Paypal but on the first mentioned with login ...
139
votes
8answers
16k views

What should you do if you catch ransomware mid-operation?

You boot up your computer one day and while using it you notice that your drive is unusually busy. You check the System Monitor and notice that an unknown process is using the CPU and both reading and ...
16
votes
2answers
401 views

Do the most common ransomware programs delete the original files as they go, or in a big bulk delete at the very end?

I'm talking about the most common varieties like Cryptolocker, Cryptowall, Torrentlocker, KeRanger, RSA4096, etc. (There is not necessarily a need to answer for all of these, one or two may do.) If ...
0
votes
0answers
29 views

Can a virus execute without user interaction? [duplicate]

I have seen a lot of malware infection techniques where the user is infected by drive by downloads through browser vulnerabilities or social engineering. But is there a way that a virus could execute ...
0
votes
1answer
44 views

What is ffmpegsumo.dll [closed]

What is ffmpegsumo.dll? I do not want to visit any websites as my AV protection is currently limited. It is one of the 4 DLLs that Avira detected on my computer. The files detected were: Unsigned ...
7
votes
2answers
198 views

Can malware infect more than one operating system?

Is is possible for malware to be written in a low-level language such as C or C++ and do the following: Infect a single operating systems(such as Windows) Detect other machines on the same network ...
129
votes
11answers
15k views

Can a computer virus be stored somewhere else than on the hard drive?

Are there viruses that have managed to hide themselves somewhere other than on the hard drive? Like CPU cache or on the motherboard? Is it even possible? Say I get a virus, so I get rid of the HDD ...
4
votes
1answer
111 views

Can a SIM card propagate malware?

Is it possible that malware can infect a SIM card? What will happen when I insert the SIM card in another phone?
2
votes
2answers
43 views

Protect against virus and malware attacks from website ads with iptables

Lots of websites spread malware by publishing advertisements that distribute malware. Even YouTube's ad network has been compromised in the past. Browser ad blockers and related plugins have there own ...
0
votes
1answer
86 views

PC reverting to infected state after virus removal [closed]

Whenever I leave my PC with a technician to get rid of viruses, this happens; at the shop the technician demonstrates that all has been fixed, but when I return home and connect hardware, after 15-20 ...
-1
votes
1answer
26 views

Does EMET auto update itself?

I cannot see this option and no answer after google for it. May be it is not good to update update itself since it suppose to be customized so if it updates itself would screw up the profile?
2
votes
2answers
63 views

Virus on mainboard(?) how does it work?

This post made me remember on a strange occurence I noticed somewhen back in 2008. At that time I had alot IT-problems I wasn't able to technically accurate fix, where I nowaday do, but that one still ...
4
votes
3answers
145 views

Fiddler show external requests but not initiated by any legitimate process

While debugging my web application in Fiddler, I found out that there are some suspicious requests to some hotel sites, search requests to google.pl. etc. See below images. Strangely there no process ...
0
votes
3answers
590 views

Removing a Redirect Virus from Fedora Linux

Despite several attempts listed below certain websites are getting redirected to a certain ad website automatically, out of the blue on linux. When some website starts redirecting to this ad website ...
-5
votes
0answers
7 views

What is i.ipricejs.info script after body tag in my page? [duplicate]

I am running one programe in my localhost. and found below script added automatically. <script ...
14
votes
3answers
79k views

CryptoWall 3 - how to prevent and how to decrypt?

My father's computer is now infected with CryptoWall 3, according to the link below. http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information#CryptoWall Is there a way to ...
3
votes
3answers
390 views

How do I remove disorderstatus.ru virus? Prevent reinfection? Make sure there is no (BIOS) rootkit left?

I have recently had two PCs infected with disorderstatus.ru / differentia.ru, by plugging an infected pendrive. From Google searches, it appears that it is a recent virus, or at least with recent ...
1
vote
2answers
65 views

VirusTotal desktop file uploader seems infected

I wanted to scan my process with VirusTotal.com and for this I downloaded vtuploader2.2.exe from their website. Before executing, I uploaded it to VirusTotal.com and scanned it for viruses to make ...
6
votes
5answers
4k views

Why do some antivirus programs find infections that others miss?

I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up. In scanning my system with ...
6
votes
2answers
186 views

Is this a Javascript virus?

So I got a random email saying this. Looks very automated: "How are things? I was visting your website on 4/9/2016 and I'm very interested. I'm currently looking for work either full time or ...
0
votes
2answers
56 views

Malware or viruses by browser redirects?

Recently was browsing and clicked on a link to the following address: (In code blocks so you cant accidently click it) http://paycheck-calculator.org/ Clicking on this quickly loaded 2-3 different ...
78
votes
2answers
13k views

Can a rogue .wmv file “hijack” Windows Media Player?

I've downloaded a .wmv file using P2P. Attempting to play it with Media Player Classic (K-Lite Codec Pack) only gave me a green square in the playback window: I noticed that the video came with a ...
0
votes
2answers
85 views

Is it possible to hide malicious code within/behind an image? [closed]

Is it possible to hide malicious code either within an image, or behind it as it is displayed on a webpage and then if the user saves this image, they actually are downloading the malicious code? ...
19
votes
5answers
3k views

Find Virus in an Image File

I just received a .jpg file that I'm almost positive contains a virus, so i have two questions about what I am able to do with the image. My first question originates from the fact that I opened the ...
1
vote
1answer
55 views

What are best methods to mitigate damage from MS Office VBA macro viruses?

We use Office macros in our work (for example: Excel User Defined Functions) so we cannot completely disable VBA in Office documents but I am looking for ways to avoid exposure to Office document ...
0
votes
0answers
7 views

Weird looking registry entry (virus)? [migrated]

I wanted to set photoshop as my default image viewer (need a workaround cause windows doesnt recognize it) so I have to edit my registry. In the tutorial on the official adobe website they are saying ...
9
votes
2answers
239 views

When do encryption viruses run? [duplicate]

Viruses that encrypt your files, like the recently very common 'Locky', seem to perform a lot of work before they are 'done'. I wonder, when do these programs run? They must take quite some time, ...
7
votes
4answers
993 views

How to trace the actions performed by a virus?

Is that possible to trace the actions performed by a virus? Run Time , stolen data and the files consulted and get the relative impact on my pc.?
1
vote
2answers
96 views

How can i read the source code of this encoded powershell script from the registry?

I get this line by ProcessExplorer C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile -windowstyle hidden -executionpolicy bypass iex ...
1
vote
1answer
52 views

How to distinguish malware from system crash?

Recently, I browsed to a website, which appeared to consume all the computer's resources. Although the mouse cursor continued to move, the browser (and other applications) slowed down fast and soon ...
3
votes
2answers
759 views

Is there any known encrypting ransomware that attacks Macs?

Just about every article I read about Cryptowall, Cryptolocker, and its ilk seems to assume that the reader is running some flavor of Windows. When I Google "ransomware OSX", I get a long list of ...
1
vote
2answers
90 views

How would one recall a worm? [closed]

Hypothetically, say I wrote a worm, call it W1, just for fun/to see if I could, and it had silently infected a large number of computers attached to the internet. Say it didn't do anything but just ...
4
votes
1answer
67 views

Thorough computer scan

I'd like to give my computer an overall deep scan against all kinds of malware. I was infected about a year ago and I feel like there may still be some hidden rootkit on my HDD or something like ...
10
votes
1answer
113 views

Computer Virus Phylogenies algorithms - pseudocode?

I've collected a large number of "Web Shell by oRb" (a.k.a. "FilesMan" backdoor, a.k.a. antichat backdoor) files by running a WordPress honeypot, and searching pastebin. The code in the variants is ...
2
votes
3answers
122 views

Is it possible for a virus to be downloaded unknowingly and run when a website is opened?

Usually, the only time I see viruses happen is when someone mistakenly runs an infected file.
3
votes
1answer
120 views

How are viruses attached to files?

How do viruses attach to files? How does it infect applications? I'm talking about down to the binary level, how does code get added to a file to make it infected? Obviously, if we hash check the ...
3
votes
5answers
2k views

How can I know if my PC is getting infected?

I have installed an antivirus, but as no antivirus is perfect, what can I do to diagnose if my PC is getting infected? For example, keeping a close eye on what programs and tasks run when I turn my ...
1
vote
0answers
450 views

wonderlandads.com popup virus [closed]

Problem As for this or this or even this, my computer has been infected to this sh-t and my browsers open an annoying pop-up on every single click to whatever web page I am visiting and this is ...
27
votes
4answers
58k views

How to inject executable, malicious code into PDF, JPEG, MP3, etc.?

I wanted to know if its generally possible to inject executable code into files like PDFs or JPEGs etc., or must there be some kind of security hole in the application? And if so, how would one do ...
1
vote
1answer
183 views

How to protect against the new malware Mazar Bot?

Mazar Bot is new Android malware that spreads via SMS. Its capabilities: It can read incoming SMS and send itself, make calls to directory contacts, contaminate Chrome, access to the Network, read the ...
81
votes
4answers
7k views

What is the risk of copy and pasting Linux commands from a website? How can some commands be invisible? [duplicate]

Like all beginners in the land of Linux, I usually look for websites that contain some useful shell commands, mark it with my mouse, copy it (CTRL + C) and paste it into a terminal. For example, if ...
-7
votes
2answers
174 views

What is is the best way to create virus signature database? [closed]

We are thinking to develop a new Antivirus program. The main concern is to create a virus signature database. I want to ask what is the best possible way to add viruses signature in our database to ...
0
votes
1answer
81 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
4
votes
4answers
104 views

What makes Malware so difficult to remove?

Why is it that when malware or adware is installed it's extremely difficult to remove? You can't go into your programs list to uninstall it and usually need a special program to remove it. What do the ...
2
votes
2answers
17k views

How does Remote Access Trojan / Backdoor Software work?

How does a RAT works? I understand it as once we visit the infected website, the browser might download the Trojan to our PC automatically. Will it be executed and auto-installed in our computer? I ...
1
vote
4answers
361 views

iPad infected with virus (popup - admobinew.com)

This morning I was reading some news on some websites (I think one of them was haaretz.com) using my iPad (ios 9.0.1), I clicked on a news and I was redirected to some dodgy website and I started ...
2
votes
1answer
129 views

Is it possible for a virus to be redistributed through RAM?

I have a new, formatted, and up-to-date laptop. It's clean of any infections and I'm sure of it. The only change I've made is that I added a new 4G DDR3 RAM stick from my old laptop, and my new one ...
0
votes
3answers
1k views

Is mgicinjs.info a virus or malware site? How to get rid of it?

Today, I noticed that almost all of my web project (published or in localhost) have a set of weird script references in their pages: And they are all automatically generated - they don't appear in ...