A computer virus is a program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes.
16
votes
5answers
340 views
Malicious Links that Respond to Browsers but not curl or wget
There are some emails with links to people's cracked websites with a malware download
Like this kind of email:
fake DHL pack station email
... the links often take the form of:
http:// ...
1
vote
1answer
34 views
Indexed link is taking to google brazil
It's happening in FF and Safari - Chrome works fine.
That, if I search for courfleurie.com in one of the two browsers, and when I click on the link, there, I am taken to google.com.br
I can visit ...
5
votes
3answers
148 views
Virus with PGP Encryption Preventing Virus Scan
A user reported having a virus that was causing pop up windows asking for money. When he turned on his laptop and logged into PGP encryption (whole disk) the desktop quickly showed but then a white ...
8
votes
5answers
412 views
Finding Win32.Sality sample for malware analysis purposes
I wish to analyze the changes made by a virus like Win32.Sality. Where can I get the sample of this, or other similar, malware for testing?
0
votes
2answers
140 views
Somehow unexpectedly my computer got infected with malware
So I consider myself a pretty conscious computer user.
I run Windows 7 SP1 Pro 64bit and I update it.
For surfing on the web I use Firefox 20.0.1 - I keep it updated. I also have NoScript and AdBlock ...
-3
votes
0answers
70 views
Questions about Remote Access Trojans [closed]
I'm trying to learn penetration testing and IT security. And i have som questions about remote access trojans.
If you are trying to control a rat server from another network, you'll have to use the ...
4
votes
1answer
138 views
Unable to get rid of Sality on my Dropbox
The story...
As a group of rookie security researchers who deal with malwares, viruses etc., me and my team-mates sometimes do commit mistakes in handling the binaries. And so, I ended up infecting ...
7
votes
2answers
2k views
Advice on what to do after being hacked?
After running a system scan earlier today, I found that my computer had been infected by a trojan horse. My reason for running the scan was because Windows kept shutting down and then recovering.
...
4
votes
6answers
1k views
Can i get 100% protection from virus by using Deep Freeze?
I have recently installed an application called 'Deep Freeze' that works by "freezing" the state of an operating system and working off delta disks. Rebooting deletes the deltas and reverts back to ...
3
votes
3answers
154 views
(Windows) Is it possible to catch a virus on my LAN without clicking on anything?
Scenario:
My unpatched PC is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
Many Thanks
3
votes
2answers
265 views
I found a virus on my USB stick. Now what?
I discovered a file, named autorun.ini on my USB flash drive:
[AutoRun]
;FjYfoT
;jpId UagEbddsb PCjo
oPEn = efhcnu.exe
sheLl\open\DEfault=1
;utvDpsMqpT dDustbemW XyAy WeywFbvaVA eQnK
...
5
votes
4answers
2k views
How does a trojan like Trojan:JS/BlacoleRef.BV infect a website?
Today I find out my website is infected with Trojan:JS/BlacoleRef.BV. The server is a shared server from a hosting company.
How does a trojan like this get on the webserver?
-1
votes
2answers
81 views
Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]
Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
7
votes
4answers
7k views
Security issues with allowing Dropbox installations on client PC's in our organisation
Does anyone know if there is any good reasons not to allow Dropbox installations on our client PC's? All the PC's have antivirus installed and running. I know it is an additional attack vector to ...
4
votes
5answers
3k views
How can I prevent viruses/malware from infecting my flash drive?
I've a pen drive that I carry to the college lab . It seems all the systems in lab is infected. I need to be able to write to the drive, so I can't simply write protect it.
Everytime I insert a ...
6
votes
2answers
209 views
Statistics on purposes of viruses/malware
Are there any resources that analyze the purpose or goal or the major viruses/malware out in the wild today? For example, what percentage are used to construct botnets (for DDoS or something else)? ...
0
votes
1answer
151 views
csrss.exe process
I've experienced some odd behavior lately (cookies being cleared in Firefox, forcing me to log in again). Antivirus scans (MS Security Essentials, MalwareBytes) aren't showing anything, but Process ...
2
votes
2answers
329 views
New Undetected Virus?
I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example:
Before:
Partition T:\
...
0
votes
1answer
82 views
Windows “Send to compressed file” creates an image? [closed]
One of my friends windows laptops (which I don't have access to right now) has in the recent past had a virus (where .doc files were converted to .exe files) which we dealt with.
Now when she ...
6
votes
5answers
257 views
Windows 2003 Enterprise infected by Conficker; post-infection problems continue
I used various tools to remove Conficker, and I pretty much succeeded, but I've had recurring problems afterward.
It won't update anymore (with the following error message: 0x800706B5)
I tried ...
0
votes
2answers
161 views
What is the meaning of .ini file in startup folder?
Now my windows 7 is too slow and crashing usually. I checked the start up folder. I get a file with extension .ini. The content of file is
[.ShellClassInfo]
...
9
votes
1answer
292 views
Could once infected machine be ever trusted again?
I'm just about to switch to a new SSD drive, so I figured it's a good occasion for a really, really fresh start. I reconsidered every installed piece of software, uninstalled lots of crap ...
4
votes
4answers
314 views
Site constantly getting infected
I am the webmaster of some websites running Typo3, 2 of which are getting infected constantly. These 2 sites are being owned by the same client.
Something happens on those 2 sites that causes ...
3
votes
2answers
161 views
Can a virus infect source code files with dangerous data?
If a user was infected with a file altering virus is it possible that checked in code (files containing text) to the source control could contain dangerous properties.
I ask this after this got me ...
12
votes
6answers
688 views
Why do malware creators use such clever technologies for such silly purposes?
Some days ago I got infected by a malware, probably something new and very clever, as it went in unstopped and no scanning tool was able to detect it afterwards (see this question).
It was a ...
1
vote
1answer
170 views
I think I downloaded spyware from an ad on tortoise-svn site
The other day in a rush to quickly download and install tortoise svn, I accidentally clicked on a big download button on an ad on their site and installed something that I don't see on my computer.
...
1
vote
2answers
163 views
Strange android app … possibly a mass malware?
I started receiving on my android Samsung Galaxy note strange notifications in Mandarin (the language of the people of china). Once I click on the notification it opens my browser with a blank page ...
17
votes
6answers
450 views
How to deal with a person who gets easily fooled by internet and mail scams?
alternative title: How to deal with a person who has gotten paranoid and doesn't want to go online anymore?
A person, who has over the years been scammed many times, by bad spam/fraud emails, and ...
1
vote
2answers
191 views
Where does mutation engine resides in Metamorphic \polymorphic viruses?
I was reading about Metamorphic & polymorphic viruses ..
to what i understood ; they both uses mutation engines to avoid detection by anti-viruses, as the polymorphic encrypts\decrypts its code ...
1
vote
2answers
212 views
Brute force a GUI login?
I know I have read somewhere that the reason the UAC prompt in Windows 7 was employed is that viruses that would supposedly execute privileged instructions won't be able to "click" the confirm button ...
3
votes
2answers
141 views
Why some antiviruses detect viruses and some not?
I am curious why some anti-viruses detect viruses and some do not. From what I found online, antiviruses parse the binary files and check the sequence of code which is malicious(exists in virus ...
0
votes
2answers
125 views
How isolated are 2 operating systems on 1 harddisk?
Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they?
I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
2
votes
6answers
361 views
Why do some antivirus programs find infections that others miss?
I have Avast Free antivirus on my Windows 7 PC and yesterday I used Bit Defender quick scan addons, which spotted a virus. In rechecking with Avast, it didn't pick it up.
In scanning my system with ...
6
votes
2answers
112 views
Process authentication for Linux
Is there any possibility to authenticate a running process in Linux to be sure that this is the original/right one?
I know that an Linux operating system is only that secure like the way you use it. ...
2
votes
2answers
226 views
keylogger detection by listening network
It is known that malware often uses keyloggers. Also some viruses aren't detected by antiviruses, therefore some viruses, especially APTs could stay in a system for so long without any detection. What ...
2
votes
5answers
130 views
Safer way to access paypal, Mobile or Pc?
I often find it difficult to chose if it is safer (in any context) to log in to my paypal, or other similar banking accounts using my Nokia or my PC.
Maybe, I am assuming the fact, that since I do ...
5
votes
2answers
161 views
How does the predator network prevent outside control by an attacker?
I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus.
Does this command and control system communicate with the ...
2
votes
1answer
529 views
Is there any decompiled source code for the “Flame”/“Skywiper” malware?
When searching for the source for Stuxnet, its relatively easy to come by in one form or another. Although I'm actually curious if anyone has done any work to comment the source and perhaps clean up ...
16
votes
3answers
536 views
Are older viruses removed from virus definition files?
Antivirus software receives constant updates in the form of virus definition files, containing the patterns used to identify viruses. It is a feature present on most (if not all) major AV for at least ...
4
votes
1answer
311 views
A couple of redirects after clicking in a link, what are they after?
I got an mass email from an friend containing only this link (made not clicable on purpose):
http://www.casadelapiedra.com/components/com_content/id876757355.php
I imagine she is got some kind of ...
2
votes
3answers
198 views
How hard it would be to infect a system with malware through a portable web browser
If I use a portable web browser on a USB device like
Google Chrome Portable how hard it would be to get infected by a malware/virus in the system to which the USB device is connected?
Google Chrome ...
1
vote
2answers
204 views
How is it possible that a virus can infect the system if the browser is started with non-admin rights
If I open my web browser (for example firefox) in Windows 7 with activated UAC as normal user (non admin) a virus - which uses a security leak in my browser - will only gets privileges of the normal ...
10
votes
5answers
589 views
Detection and analysis of unknown malware
Suppose I have a binary which is suspicious. How can I determine whether it is malicious, and if it is, reverse-engineer how it works and what it does? For example, maybe using static analysis?
Are ...
2
votes
4answers
340 views
Detecting malware hidden in P2P traffic
Consider a network situation involving (only) Peer to Peer traffic in medium sized network.
For the sake of convenience, a simple P2P application like DC++ may be assumed, although I am aiming at a ...
3
votes
4answers
440 views
Is it safe to serve any user uploaded file under only white-listed MIME content types?
Let's say I develop an application that,
Allows any user to upload a file of only white listed mime content type and extensions (word and pdf).
Serves those files with the allowed extension and ...
3
votes
3answers
18k views
Is Teredo in my router a back door?
I use the school computer, which I bought from school, administered by the IT-department. I opened a port to my computer when I stumbled upon this:
It points to my computer IP. (I have a static IP ...
1
vote
1answer
84 views
How does window.w3ssss hack occur
Recently a .Net MVC 2 application on our server was infected with a virus / hack, it added some Javascript to the index.aspx pages of the site.
While we have cleaned it up, I have not been able to ...
5
votes
6answers
391 views
How can a novice find proof of a system compromise?
I am almost certain a colleague has installed a keylogger on my system. I am totally new to IT security, but have substantial linux / windows / programming experience.
The system I believe is ...
1
vote
3answers
112 views
Is possible to know if increased marketshare means more viruses?
I'm having an argument with other developers about why more "viruses" exist (including all forms of external attacks, exploits, etc) in Android vs iOS. Like with Windows vs *nix, the main idea is that ...
0
votes
1answer
94 views
is there any program that can tell me which files have been transferred from my computer thru the web
Is there a program that can tell me which files have been transferred from my computer thru the web?
So if I have virus on my computer that transfer files I will know about it according to the files ...
