Tag Info

Hot answers tagged

3

Being able to convert an archive from one format to another without decompressing it is very rare. Different formats use different file structures and algorithms that are incompatible and you'll be forced to decompress the source format at some point. When conversion by decompression is done, many of the vulnerabilities could be exploitable. The attack ...


3

I worked at antivirus industry 12 years ago, so I'll try to explain, but it is possible that my knowledge is a bit outdated. Each serious antivirus vendor has antivirus lab, whose work is split to: detect new viruses and develop solutions for them: signatures, behavioral patterns for heuristic detection, specialized detection code, sometimes cleaning code ...


2

The way you convert a jpg to a bmp would be to essentially decompress the jpg and write it as a bmp. To convert one archive format to another you'd have to decompress the original first and then compress in the new format. Whether this is "safer" or not depends on whether the tool you're using to automatically decompress has different vulnerabilities to the ...


2

Virus Total and malwr and both good sites to submit suspicious files. Virus total will tell you if the file is flagged by any antivirus. Malwr will give you more detailed analysis (this may/may not be of interest to you). Note that you're submitting files to an online community, so don't submit anything that is potentially proprietary/secret.


1

What browser does he use? I've had users that have experienced similar issues, and one of the first places I check is the extensions running on all installed browsers. You can find pretty good clues as to the name of the program you need to remove in order to stop the pop-ups. Check his installed programs for anything that might be out of place too. If my ...


1

The two previous posts give great advice. Here are the areas I would focus on: 1. C and Assembly Languages - Critical you know Assembly like a second language 2. Debuggers - WinDBG and gdb - A debugger will be your best friend 3. Windows and Linux Internals - You must know exactly how the target system works so you can identify exactly what the malware ...


1

The easiest way is to ring your ex-employer and ask them is they sent you the email. If they say no, then you know it is a virus or similar and delete it with no further thought. If they say yes then you can go ahead and scan the attachment for a virus.



Only top voted, non community-wiki answers of a minimum length are eligible