Hot answers tagged

6

Using something like BadUSB can turn any USB device into a keyboard, RubberDucky makes this even easier. Using these techniques you can run commands and install mallware on a computer without the user ever pressing a button or opening a file. So yes, using a untrusted USB (storage) device can be dangerous.


4

MD5-based anti-virus just doesn't work MD5-based anti-malware works decently against static-infections that never change. If it changes even by a little bit, you're screwed. However, MD5 is also vulnerable to collisions, so you're going to have a fair share of false positives. I wouldn't rely on this method at all. SHA-256 would probably be better for ...


3

The best numbers I've found so far are in the Microsoft Security Essential Report 19 where they show at page 89 that with full real-time protection the infection rate is still at about 2..5%. Then there are numbers from the Cicso Annual Security Report 2016 where they claim a time to detection at about 20 hours, but adware and browser injections are at ...


3

Yes, signatures vary as they are developed by the antivirus vendors independently of one another. One vendor's product may catch malware that another misses, or get a false positive that another would not find. You may end up with multiple vendors having identical signatures for the same piece of malware because of malware's traits have few, or one ...


2

Sharing a USB is always a risk. We never know what new ransomware or malware that pendrive contains. Its always advised to scan the USB before opening the files in your system. Also how would you know by seeing if a file is corrupted,malware etc? Ever came across autorun malware in windows? You dont need to click on the file for it to run


1

Mark Buffalo has already provided an good answer on things to consider. However, I'd like to expand on his answer with few solutions, ofcourse it's extremely broad question so by all means this isn't remotely close to an "best" solution. It's just things to consider. I'll be making many assumptions based on this question and they will be: The operating ...


1

There's no requirement in the Windows operating system to properly register all the components that the program is going to install, or to provide a means to uninstall. Largely this is a "gentleman's agreement", which is in the interests of legitimate software companies to follow, and they generally do. Malware authors have no interest, (and no requirement ...


1

Malware is not made to be easy to remove. That's the point. You should not even be able to tell that your computer was infected. The malware authors employs several techniques to make their software almost impossible to remove: encrypted code, multi-part software, self-healing components, and rootkit behavior. If you could just go to programs' list and ...


1

Malware isn't installed as a "program" like a game or a web browser. Malware can replace an existing program that gets executed when the computer is booted, so you'd never see anything was wrong, or hides in RAM, or many other options.


1

Check on another device to see if the same behaviour occurs. I don't believe removal of malware is the scope of this forum. However, I'd recommend you do an virus scan, check your BHOs and Addins on your browser.


1

Some av vendors reuse the signatures of anothers. For example Kaspersky Lab have inserted into its bases the signatures for some non-malicious files to detect the reuse and after some time they observed them detected by some another's companies' avs as malicious.


1

A virus can be a standalone file. I could send you a meterpreter file as an exe, for instance. No manipulating of execution flow is required. A parasitic virus infects an existing file. I could inject meterpreter into calc.exe for instance. Exploits exploit the program processing a file. That's where the flow of execution gets manipulated. That's where ...



Only top voted, non community-wiki answers of a minimum length are eligible