Tag Info

New answers tagged

4

A virus binary is just like any other file. If it's not executed, then it is just data. Note that there are other possible avenues that a virus could be activated without your consent. For example, if your computer is set up to automatically display thumbnail from an image file, and the virus exploits a buffer overflow in the image parser of the thumbnail ...


3

A collision for a cryptographic hash function h is a pair of data elements (two sequences of bits) m and m', which are distinct from each other, but hash to the same value (m ≠ m' but h(m) = h(m')). Since a hash function accepts as input sequences of bits that can be much longer than the fixed output size, the number of possible inputs to a hash function ...


4

Traditionally a virus is malware which uses the infected host to replicate itself to other systems, i.e. by infecting files which might get shared, copying itself to network drives or USB sticks. It gets usually not knowingly executed by the user but gets executed when the user opens an infected file, runs an infected program etc. A trojan is a malware ...


1

These terms have a great deal of overlap and should not be understood to be mutually exclusive of each other. The vocabulary used to describe different forms of malicious software developed organically as researchers described what they were finding to each other as well as distilling the concepts into recognizable terms for people unfamiliar with ...


1

Change your password. Regardless if this is a genuine compromise or not password hygiene is vital, especially when anything that is suspicious is flagged up. You should also set up two factor authentication. There are number of innocent reasons why this could happen though, I've listed a few below, which are in no way ment to be an authoritative final ...


1

As schroeder states it's much more likely that something between you and your ISP caused your public facing IP address to change. The vast majority of consumer internet dynamically allocates you an IP address, so simply restarting your modem will probably result in it changing.


0

Found it... It's NOT a virus... These files are added by SaveFrom.net chrome extension... I opened all of my sites by IE and see no sign of those scripts as that extension is not present in IE... Damn, what a heavy fear and pressure...!


2

The BIOS or equivalent firmware is the first thing that runs when the computer is booted, so it could easily start a lightweight hypervisor before loading the OS that will present a clean firmware image if the OS ever asks for it, while still being compromised. So from the actual machine, there is no reliable way to check if the firmware is malicious. You ...


-4

I'd run these programs (http://pastebin.com/BeKzci9A). I'd highly suggest trying to find out what rootkit, if any, has been installed on your system and researching how to specifically remove it on top of everything else. Also it is highly suggested that you always boot your operating system that you know is compromised with a LiveCD, mount your infected ...


2

Is there a list of all known C&C servers published somewhere that I can just add firewall rules for? Unfortunately the operators of such botnets and malware have adapted various strategies to work around such blocks. A complete and always up-to-date list is not possible because these server change frequently either because they got taken down by ...


5

Go through the apps you gave some permission on facebook. Especially the "post on my behalf" permission. Remove any you don't trust (or don't remember giving them permissions). Anyway, it might be a one time thing, and there is nothing to get rid of. Read through this blog post for more information. In the extreme case, you might be indeed infected by ...


4

Short answer: It will need internet connectivity briefly, then it will encrypt everything even if you disconnect. Long answer As soon as CryptoWall runs, it will generate a random RSA public and private keys, connect to one or more control servers, and upload the private key along with some information on the system it is, like OS version, public IP and ...


2

Short answer: no, you can't. There are 3 senders to your E-mail. 2 fakes and one hidden and unreachable. The one you find within the headers: From: field is free. Anyone can put whatever he wants there. You can't trust it. You cant't build anything on this one. The edited sender of the E-mail you received is do_not_reply@apple.co.uk. It looks serious ...


4

Blocking the senders e-mail address is unlikely to be an effective measure as spammers/malicious actors will commonly change the address they use on a regular basis. That said it's worth noting in this case that a quick search for do_not_reply@apple.co.uk shows the only indexed instances of this address being spam related, so it doesn't appear to be one ...


1

I would consider this to be the milk snake of the ransomware world. In that you are right, FBI ransomware is rather a crafted malicious JS code that is more annoying and scaring than penetrating the operating system, and as you can read on the TheSafeMac: …there is no indication that this is actually Mac malware of any kind. It’s simply an ...


1

Basic security stuff Install a router between your machine and your modem: This can help to block all traffic that is not normally something you would want to allow. Be sure to change the default password on the device once installed. Looking at netstat, those are all web traffic. Also if you did not have a router because you're afraid of the dangers of ...


4

This is what I think is happening: Your computer was indeed infected by any of these viruses: microsoft malware list containing 'obfuscator'. What does the virus did or do, we can't know without an exact identification of it. The reason your computer may be connecting to: akamai.deploy.something may be related to this: ...


2

Likely answer: your wireless AP is assigning your IP and hostname and getting confused. Lots of confirmation with a little Googling: http://apple.stackexchange.com/questions/30552/os-x-computer-name-not-matching-what-shows-on-terminal http://superuser.com/questions/663765/unknown-system-name-showing-up-in-terminal



Top 50 recent answers are included