New answers tagged

0

You could run ent to see how much entropy a file has, a file with high entropy is likely either compressed or encrypted (or both). A problem is that JPEG, XLSX and ZIP are compressed, so actually compressed files are very common. If you suspect that X is an encrypted version of file Z then you could check if they have similar sizes, plus small delta for ...


0

If you have a clean system, you can use PowerShell to generate hashes for the valid files (i.e., you may have valid encrypted, compressed, binary and regular files); and each sweep you generate new hashes and compare if any hash has changed. Based on type, etc you can determine if this is normal behavior. For instance, I look use PowerShell Get-Process in ...


1

You can use the file command on Linux/Unix/BSD (pick your poison). For example: $ gpg --encrypt test-encrypted -r sample@sample.com Enter the user ID. End with an empty line: $ ls test-encrypted test-encrypted.gpg $ mv test-encrypted.gpg testfile.txt $ file testfile.txt testfile.txt: GPG encrypted data However, this only ...


4

None of the symptoms you posted is a sign of having malware on your computer. My internet connection slows to a crawl often Complain to your internet service provider or find a better one. my games keep crashing Viruses don't tend to do that. When you have problems running games, it's far more likely to be a problem with your graphic driver... or ...


0

There is no sure way to tell. You can find a virus on your computer, and then I guess you'll know that there is a virus. But it is not possible to be sure that there is a virus responsible for all of the suspicious activity on your computer. It is equally possible that someone is hacking into your computer and screwing around with it. But in terms of ...


2

The biggest clue came in a comment: I am getting same thing. Did you use innoSetup? And I did. The conversation here points to a problem involving Inno Setup seemingly generating what appears to be a matching signature for a trojan:Win32/Fathale.B!plock. Submit the installer to the Microsoft Malware Protection Center. If your installer is indeed ...


6

My guess is that you have Avast Mail Shield active and therefore it will scan any incoming and outgoing messages. This is probably done by being a man in the middle, i.e. your mail client actually connects to a local process from Avast which then connects to the real mail server. This means the internet access is necessary to actually get the mails from the ...


2

Let's not overestimate the finding of the security consultant because some of them don't really know what they do. Of course I don't know the real report and can base my opinion only on what you wrote. But I had once to do with a report where the consultant complained that the EICAR virus was not found by a firewall when it was used as a subject of a mail, ...


0

Tell management getting a virus is like getting an STD, and just running an antivirus program without fixing the damage is like just wearing condoms from then on.



Top 50 recent answers are included