New answers tagged

6

My guess is that you have Avast Mail Shield active and therefore it will scan any incoming and outgoing messages. This is probably done by being a man in the middle, i.e. your mail client actually connects to a local process from Avast which then connects to the real mail server. This means the internet access is necessary to actually get the mails from the ...


1

Let's not overestimate the finding of the security consultant because some of them don't really know what they do. Of course I don't know the real report and can base my opinion only on what you wrote. But I had once to do with a report where the consultant complained that the EICAR virus was not found by a firewall when it was used as a subject of a mail, ...


0

Tell management getting a virus is like getting an STD, and just running an antivirus program without fixing the damage is like just wearing condoms from then on.


0

From some casual research, it appears there are a couple of programs which use ffmpegsumo.dll, notably - Google Chrome, Google Chrome Frame and MathsBuster - GCSE Maths Higher Level. If you do not have and have never had these programs installed, it could be a problem or it could still be a false positive. As the other files you've detected look to be ...


0

Vulnerabilities aren't the same as viruses/malware. A vulnerability is a flaw in the operating system or a legitimate program that allows unexpected, unauthorized, and unwanted control of the computer. Common types of vulnerabilities are: execute code: Flaw in program/OS allows attacker to run arbitrary code, programs, or instructions. elevation of ...


1

The reason some vendors recommend that you don't install multiple antivirus/antimalware solutions is because some of these solutions contain signatures used to detect the malware. In this case other solutions may incorrectly identify the antimalware solution as malware itself, and attack it. Now you have the system attacking itself, which may lead to ...


2

I think you're hearing information that was generally thought by not so tech savvy people that a Mac doesn't require AV, or is less susceptible to attacks. That's a very bad assumption, and the idea was brought about by individuals who gave Windows a bad stigma, and were pro-Apple. Some individuals learn that Mac is based on Unix/Linux. They learn, or ...


3

Malware is a fast evolving beast and their is no single solution which will protect you. But you can reduce the risk in various ways. First you need to know how the malware gets delivered: A major delivery vector for malware is mail, i.e. either as an attachment in the mail or mail which includes a link to some site you should visit. While many of the ...


-2

Anti-virus software is useless. In fact, it is worse than useless because it gives you a false sense of security. Even Symantec, a major provider of AV software, has publicly admitted what all security pros know: AV is useless (Symantec exec declares AV is "dead", WSJ 2014). Typically a hacker will get control of your machine one of two ways: by sending you ...


0

We use Kaspersky in our network as well. Kaspersky Network Agent is the agent installed on client machines to report back to the security center (or the central point of command for your IT staff) The Agent itself is not responsible for the AV. Its simply the means to which the Endpoint manager(the AV on the system) can communicate with the Security Center ...


10

How does Firefox save the passwords? Previous answers have already presented the general idea, but a more in-depth explanation can be provided. Firefox stores all user information in the profile folder. On Windows, it's located under %APPDATA%\Mozilla\Firefox\Profiles\; and on Linux, ~/.mozilla/firefox/. The profile folder is created the first time ...


1

Unfortunately, if everything required to get your site password is stored on your computer then it is potentially vulnerable to malware. The only way to avoid this is to have user input (in some form). It is basically a trade-off between convenience and safety. If you don't have a password manager you trust and are willing to put some effort into ...


19

Firefox can decrypt the passwords without you entering a password. That means it must have the decryption key--which means any program that knows how Firefox stores things can find them. This applies to any program that stores information on your system. Encryption is only a strong defense if you have to provide the decryption key before accessing the ...


49

Passwords saved by Firefox are not encrypted (they are encrypted but the key can be read out) until you set a master password. I don't think that this is a bug, but every virus could read those passwords nonetheless


0

Heuristics - whether used in AV, antimalware, or on a network - work on the premise of "straying from the norm." To avoid a lengthy post, please read "Understanding Heuristics." Now to give a non technical analogy that is applicable to most (networks, AV, etc): Imagine you are a security guard at a building (AV, network appliance, etc) and you are told: red ...


0

Heuristic scanner (for a file) can look/do for various things, including: sandboxing the application and analyse the behaviour (which files are created/deleled/modified, ...) looking for hooks to functions (direct disk writing, TCP socket binding, ...) strings like filenames (read/write of system files, ...) memory residence ability decryption of the ...


2

The answers already in provide some good technical advice on how to go about doing what you propose while minimizing risk to whatever machine you would be using to attempt the sanitization (ie. run a live distro of a different operating system type than was on your friend's infected computer, preferably after physically removing or disconnecting the normal ...


26

Referring to my answer to this question (before it was migrated): No, scanning the drive without "opening the folder" isn't a secure way to protect against viruses on the drive. It's very risky to insert what you believe to be a compromised USB device into your PC, no matter what AV you have installed. If you desperately need files from the drive (to quote ...


3

Depends on what it has on it. There are some attacks and malware which affects the signals that the device sends to the computer - most famously the BadUSB attacks, which let flash drives claim to be input devices - in which case merely plugging a device in could allow it to do things ranging from the annoying (hitting enter at random) to the malicious ...


6

It depends. I older times there was an autostart facility when inserting a data DVD/CD-ROM or USB stick but on modern systems this is usually no longer active by default. It might still be possible to corrupt the file system on a stick in a way which causes code execution when the system tries to access the device. And there are USB sticks with a writable ...


1

What makes you think that's a virus? Ok, according to VT there is only one detection by NANO-Antivirus. In cases like this one, I like to check file in sandbox to see what's happening. So based on static and dynamic analyze with cuckoo sandbox, I don't see nothing which indicate to be a malicouse file. File Name vtuploader2.2.exe File Size 142744 bytes ...


2

It is a place in your computer, which kinda acts as a prison for viruses infected your computer which were later arrested by your antivirus software. Quarantine is a function of antivirus software that isolates infected files on a computer's hard disk. Files put in quarantine are no longer capable of infecting their hosting system. A quarantined ...


1

Only 1 of 55 scanners detected anything and the report says Probably harmless! There are strong indicators suggesting that this file is safe to use I'd go with trusting the file.



Top 50 recent answers are included