Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [antimalware]

Software which includes anti-spyware, anti-rootkit, anti-phishing, and other technologies that attempt to identify and/or block malicious programs.

Filter by
Sorted by
Tagged with
0 votes
1 answer
110 views

Kaspersky silently inserting script tags in my downloaded files [closed]

I was working on a restricted system today and needed to take some html to an internet computer. I emailed the html file to my gmail and opened the html file and immediately noticed that a script tag ...
ChopperOnDick's user avatar
1 vote
0 answers
64 views

Streamer Virus on offline network [closed]

I have an offline network with 200 users. and routers, switches, 4 esxi servers and 1 netapp rack. After about a year, my team found out that we have a virus in the network called streamer.exe that ...
Eyalby's user avatar
  • 11
0 votes
1 answer
140 views

How are virus or exploits tested without being detected?

I was wondering how threat actors actually test their exploits without them being automatically detected and added to the library of an antivirus detection system, thereby being marked as useless and ...
birdd's user avatar
  • 41
0 votes
1 answer
123 views

How does malware work when compressed?

I have read up on compressed folders of file types such as .zip, .rar and .7zip being the malicious file itself (excluding cases such as an .exe file being disguised as a .zip file etc...), only ...
ReaLiTy-UnFatHom's user avatar
4 votes
4 answers
7k views

Zero-day prevention. Is there a Windows program that encrypts files on-the-fly, keeping only the currently open file decrypted?

I'm looking for a program for Windows that can securely store my code. The program should be able to encrypt my files on-the-fly, such that only the file I'm currently using is kept decrypted (mainly ...
xia's user avatar
  • 49
0 votes
0 answers
103 views

help in understanding hybrid analysis results? Mac

So I have a few PDFs on my computer I got online a few years ago on my Mac computer. When I ran a virus total scan on some of them I got a couple that were concerning. Here is the one that most ...
DELL_GONEEE's user avatar
0 votes
2 answers
502 views

Employer installed Endpoint Security on personal computer

I have a personal device through which I access the employer's network through a VPN. I can connect and disconnect from the VPN when I choose. I did not know the employer had installed Sophos Endpoint ...
anon123456's user avatar
1 vote
1 answer
1k views

Validate File Uploads in PHP: PDFs and images

We're trying to secure our upload forms in PHP regarding image uploads and PDF files. For this purpose, we're currently trying to do the following in all cases, according to our research done so far: ...
DevelJoe's user avatar
  • 141
1 vote
0 answers
84 views

Best practice: checking backups of CMS-websites for viruses (code, database, and files)?

I've got backup files of several CMS-based websites on my local computer (Microsoft Windows) that need to get checked for viruses. Are there anti-virus scanners that catch viruses in the code, in ...
Madamadam's user avatar
  • 111
0 votes
0 answers
95 views

How do high-quality antiviruses recognize viruses? [duplicate]

How do high-quality antiviruses recognize viruses? I heard that such programs use virus databases. How high quality can an antivirus that uses free databases be, which databases are the best among ...
Joseph Conrad's user avatar
1 vote
0 answers
92 views

Can you exclude scanning of a particular app or file on Avast Antivirus for Samsung?

I have Avast pro for my Samsung. I searched the whole app but I cant find the option to exclude/whitelist an app or file from scanning. Is there such an option for android? I looked through their ...
nikak's user avatar
  • 11
1 vote
1 answer
121 views

Can I trust companies that test antimalware software? [closed]

Do they lie? I mean companies something like AV-TEST, AV-Comparatives, Virus Bulleting, ERG Effitas, etc.
Kristal's user avatar
  • 11
0 votes
1 answer
190 views

Windows Security deletes my USB virus as soon as I plug it in

I am studying ethical hacking and I work in the cybersecurity department of a company. I have been testing a hacking program but some PCs delete this executable as soon as I plug in the USB and some ...
Alex's user avatar
  • 1
0 votes
0 answers
221 views

Same miner detection by Kaspersky Anti-Virus after every boot up

I recently bought and downloaded Kaspersky. Since I downloaded it, after every reboot, it keeps detecting what seems to be a crypto miner. Every time it claims to delete it. Should I be worried ? Name:...
Youssef Mohamed's user avatar
0 votes
1 answer
366 views

No antiviruses scan graphics cards VRAM for malware?

As I know, for antiviruses the VRAM is a blindspot, so casual Windows users like me can't do much about it. They have an antivirus, which doesn't even search for malware in VRAM. What's the answer for ...
kiec00's user avatar
  • 39
2 votes
1 answer
217 views

How do you boot from the network using https?

How do you boot a Linux live image from a CDN using Https as boot protocol? The reason for netbooting using a CDN would be to start fresh with a non persistent operating system image. Booting fresh ...
Christian's user avatar
  • 265
0 votes
0 answers
106 views

Malware sinkhole evasion techniques

I have read into malware sink holing, as a way to disrupt botnets. There are also approaches to make this more difficult, for example using a Domain Name Generator algorithm which is what the ...
questioner's user avatar
-1 votes
3 answers
282 views

Do some malware/viruses stay on the internet basically indefinitely?

Biological viruses stay in the population essentially indefinitely. We have immune systems, but this somehow doesn't cause virus strains to completely disappear after some time, as everyone's immune ...
user56834's user avatar
1 vote
0 answers
260 views

What is the difference between malware signatures and malware artifacts?

I am trying to analyse some malware samples but I am trying to understand the differen between malware signatures and malware artifacts. As far as I understand (and from what I've understood from this ...
jefazo92's user avatar
2 votes
0 answers
710 views

Can a virus infect windows 10 bootable media?

I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
Jilifkate123's user avatar
0 votes
1 answer
189 views

Malware dropper uses "^" character in syntax of cmd.exe before calling mshta.exe to download file?

I found a malicious Excel file that was using an embedded HTA program as its dropper to download a powershell program from a malicious IP. The dropper was on a hidden sheet in the file. After ...
QOHEN's user avatar
  • 1
1 vote
1 answer
3k views

Mp4 virus scanners

I used to download a lot of mp4's from untrusted sources. But I discovered that they could contain malware. I would like to know if there are any methods to clean or to check video files for malware.
asterix's user avatar
  • 11
2 votes
3 answers
919 views

How can I have my process detect if antivirus injected a module or DLL to it?

I am writing an installer process (.exe). My installer deploys different components. It will add registry entries, copy files, copy files over the network, remote execute, remote PowerShell, local ...
ilansch's user avatar
  • 123
6 votes
2 answers
556 views

Do antivirus programs increase your attack surface and potentially give more power to malware?

When I was a student one of my professors used to say that an antivirus actually increases your attack surface by injecting itself into system processes and let's say opening more doors for ...
Sir Muffington's user avatar
0 votes
1 answer
285 views

How to find discrepancy between exploitable and unexploitable VM

For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
Andreas Unterweger's user avatar
1 vote
0 answers
178 views

How to stop 3rd party libraries from being reported as malicious, if they were part of malicious programs in the past?

Some are standard user space dll’s and another one is actually a windows driver. The libraries alone are not dangerous and are pure utilities but they can be used by bad guys, like most software tools....
miran80's user avatar
  • 171
1 vote
1 answer
232 views

Are there any existing JTAG (hardware debugging) based malware detection systems, and if not, why?

JTAG System software debug support is for many software developers the main reason to be interested in JTAG. Many silicon architectures such as PowerPC, MIPS, ARM, x86 built an entire software debug, ...
J.Todd's user avatar
  • 1,310
1 vote
2 answers
230 views

Has exploitation been demonstrated against the fundamental constructs of the debugging process?

I'm curious to know if an attacker can fundamentally exploit the debugging process. I'm not asking if specific debugging tools have been exploitable, surely some have, but rather whether the process ...
J.Todd's user avatar
  • 1,310
3 votes
2 answers
348 views

Is there a way to record CPU operations for a given process as they occur in a standard, production OS environment?

Doing malware analysis I'm interested in being able to log every instruction the CPU executes for a given process. I was hoping this was perhaps possible in a standard VM environment, even if not ...
J.Todd's user avatar
  • 1,310
1 vote
1 answer
172 views

Why don't computers enforce immutable address spaces for execution?

A piece of malware detects signatures of the sandbox an AV solution tries to use to fingerprint malicious behavior and pretends to be innocent. Once in the real OS environment, it then downloads ...
john doe's user avatar
  • 775
1 vote
0 answers
169 views

Detecting and understanding malware/spyware [closed]

Recently, stumbled upon the new FB 500m+ leak and decided to satisfy my curiosity and poke around. Basically just wanted to see how 500m+ user records were kept and what info was released( it was ...
Tol's user avatar
  • 11
1 vote
1 answer
2k views

If a file has previously been scanned by VirusTotal, will the VirusTotal website always indicate this fact?

I recently downloaded a very popular open-source application. Usually, I compile open-source applications myself after reading the source code. But my compiler box was busy with many tasks, so I ...
End Antisemitic Hate's user avatar
2 votes
4 answers
651 views

Can a antivirus software detect a malware that steals data?

For example, consider a software that wants to package all txt files in the /user/Desktop directory and upload them to its own server. I am not a programmer, but I know it can be done very easily with ...
birisix's user avatar
  • 23
1 vote
1 answer
351 views

Cannot interpret maldet results

After executing sudo maldet -a / LMD provides the following report: HOST: foo.bar.baz SCAN ID: 210117-2223.1145531 STARTED: Jan 17 2021 22:23:26 +0000 COMPLETED: Jan 18 2021 22:01:12 +0000 ...
user1192748's user avatar
0 votes
1 answer
223 views

What is the use case for antimalware manual scans?

I am not able to understand what use is the manual antimalware scan? All antivirus software has a manual anti-malware scan. I understand if it's the first time someone installs it on their infected/...
Jay Shah's user avatar
  • 339
0 votes
2 answers
720 views

Does malware that comes through outdated apps go away if I uninstall the apps?

I was reading this and this article. The first article itself is about why software updates are extremely important for security, and the second one also mentions the following: "Make sure your ...
Jay Shah's user avatar
  • 339
1 vote
1 answer
14k views

How to check for malware before downloading a torrent file?

I wanted to know if there is a way to check if a torrent file has malware or not, before actually downloading it via uTorrent f.e. I only know VirusTotal site. Is this one reliable? Because each time ...
WckD-qwerty's user avatar
0 votes
1 answer
6k views

Remote Access Trojan (RAT) -- How to detect, how to remove [duplicate]

Is there a guaranteed way to: Know there is a Remote Access Trojan in my PC? Remove it completely and successfully from my PC? Note: Assume that the hacker doesn't leave any hint of their activity (...
Jay Shah's user avatar
  • 339
0 votes
1 answer
702 views

How to check which process is modifying my clipboard?

I'm on Windows 10 last build and for a few days it looks like I have a malware that modifies ethereum addresses in my clipboard. I sadly tried a lot of antivirus, antispyware and nothing is found. I ...
Walter Fabio Simoni's user avatar
1 vote
2 answers
255 views

Why don't antivirus definition files get detected as malware

I was wondering... if antiviruses store virus definition files that contain virus signatures then why wouldn't they get detected as malware by themselves or Windows Defender or any other AV out there?
somebody6000's user avatar
0 votes
2 answers
336 views

What does the bizarre text mean at VirusTotal?

I downloaded Bitcoin Core from here: https://bitcoin.org/bin/bitcoin-core-0.20.0/bitcoin-0.20.0-win64-setup.exe I then uploaded it to VirusTotal: https://www.virustotal.com/gui/file/...
D. Haughton's user avatar
0 votes
1 answer
274 views

Anti virus vs Anti malware? [duplicate]

What is the difference in anti malware like malwarebytes premium and an anti virus? Do I need both or would malwarebytes be enough?
Bluesandbox's user avatar
4 votes
5 answers
1k views

What are the benefits of enabling antivirus full scanning?

If AV auto-scan will detect and prevent the malware from executing why there is a need to enable schedule/full scans? I'm asking because a full scan can create sometimes overhead on the machine and ...
Filipon's user avatar
  • 1,294
4 votes
2 answers
177 views

How could malware disable third party security software?

I'm asking this question with the assumption that anything the user can do, so can malware. I'm using a third party firewall on my system to control which programs are able to access the internet. ...
Synthetic Ascension's user avatar
0 votes
1 answer
106 views

where to get more information about Malware [closed]

Where I can find more information about Malware, like its name, malware family, its behavior, first seen, which type of file its use, its internal code, etc. If someone knows any source of Malware ...
Satya Prakash's user avatar
0 votes
2 answers
6k views

How to make sure my phone is secure after a phishing attempt?

Situation: My phone is an android (Samsung Galaxy s6) - In a moment of mindless distraction yesterday I opened a pdf in a phishing email - it did contain a link but I did not click it. Very shortly ...
Jessica's user avatar
1 vote
1 answer
1k views

Is signature based malware detection a thing of the past?

I made an experimental AV application to detect some test files as malware. It uses a simple signature based detection to detect those files. When my test AV encounters a file, it computes the SHA256 ...
Aravind A's user avatar
  • 157
1 vote
0 answers
16 views

How does Antivirus identify virus using signature-base? [duplicate]

I have read many articles about AV signature-based but I'm still not clear how AV using Hash to compared with the signature.
Khavy Mony's user avatar
1 vote
1 answer
198 views

Does a Windows 10 endpoint check software installations for malware if they are installed through GPO / SCCM / Software Center?

I'm trying to get a view on what extra security checks our packaging team could do when they download a potentially infected installer from the web before they package an MSI or EXE (assuming that the ...
marvelade's user avatar
0 votes
2 answers
165 views

How can I determine if a malware sample is morphic? (polymorphic, metamorphic, etc)

I want to do a malware test that specifically uses recent morphic malware samples (polymorphic, metamorphic, etc). There are a couple of good sources I can pull samples from, but I need to know if ...
Erelbrin's user avatar

1
2 3 4 5
7