Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [antivirus]

Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

1
vote
0answers
14 views

Why does windows defender scan my computer multiple times

Occasionally, Windows Defender sends me a notification that my device was scanned. This occurrence is quite ordinary and boring, but I actually devoted two seconds to reading the entire message once, ...
1
vote
1answer
70 views

Explaining malware avoidance tactics

Most "how tos" regarding malware list this: Install Antivirus software. Install latest antivirus software. Run antivirus software regularly. Install latest operating system. Install any patches to ...
1
vote
1answer
55 views

How to (temporarily) disable McAfee Endpoint Security on an enterprise workstation?

I need to temporarily disable McAfee Endpoint Security on an enterprise workstation after having obtained local administrative privileges. The McAfee Endpoint Security settings are protected by a ...
3
votes
3answers
68 views

Why does VirusTotal have two different reports for the same hash depending on FILE vs URL submission?

Why would the same SHA256 Hash of a file have totally different VirusTotal results at the same time? Submitting a file to VirusTotal via File upload results in numerous hits for malware. ...
1
vote
0answers
34 views

Where is the Administrator password for McAfee Endpoint Security stored on the local machine?

Where is the Administrator password for McAfee Endpoint Security stored on the local machine? I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
0
votes
0answers
36 views

Heuristics-based vs behavioral malware detection

I'm working on my thesis and I have a couple questions about differences between heuristics-based and behavioral malware detection. Does heuristics-based detection rely only on statically examining ...
1
vote
0answers
53 views

How to prevent the ransomware to run with administrator privileges?

We have been attacked by the ransomware recently (adobe li). The strange thing is that ransomware was able to gain unimaginable high privileges. The virus of the ransomware has been located on the ...
0
votes
1answer
59 views

Does Windows 10 provide sufficient virus and threat protection? [closed]

I am configuring a new laptop with Windows 10 Home and trying to determine if it is necessary to buy one of the big antivirus packages such as Norton, McAfee, etc. Is the security software that comes ...
1
vote
2answers
35 views

What risks do I take using an application that always requires admin access and AV exception listing?

My knowledge level about OSs and security is extremely low. Is anyone willing to tell me whether it's risky for me to use an application that requires me to run it with admin permissions and to put it ...
2
votes
1answer
97 views

How does Malwarebytes intercept web traffic?

I use Malwarebytes and the web filter functionality puzzles me. As far as my research has found, antivirus engines typically use a proxy to intercept web requests which typically there would be ...
1
vote
2answers
54 views

How to protect your anti virus program or logging agent?

its a very simple question but might not be too trivial. Imagine an attacker has access to your device and gained SYSTEM privilege. Your company has installed a logging agent on your device to capture ...
0
votes
2answers
101 views

Is Kaspersky Total Security a good choice against malware? [closed]

I've been using Kaspersky Total Security for quite some time even though I'm not an Information Security professional, I heard it was considerably efficient. Yesterday, though, I was navigating ...
-1
votes
1answer
58 views

Online traffic monitoring by ISP for safety purposes [closed]

I have a question regarding approach to online security and protection against viruses, malware and phishing by one of the biggest European ISP. Below you will find my understanding of the topic. Is ...
0
votes
1answer
71 views

Do SSL proxies such as those from antivirus vendors hijack client processes?

In an attempt to understand the topic further, the following posts were reviewed. Why is 'avast! Web/Mail Shield Root' listed as CA for google.com? Are the certificates from “skype click to call” ...
-1
votes
1answer
281 views

System Infected: Trojan.Naid Activity [closed]

We have Tomcat 6 in the production server with Symantec Endpoint Protection on windows server 2008 server datacenter. Symantec showing following lines in logs [SID: 27068] System Infected: Trojan....
3
votes
2answers
188 views

Malware Author's Mindset

I'm studying common malware characteristics, and I'm having a bit of difficulty understanding the design choices the malware authors make. Many of said choices seem to revolve around making life ...
0
votes
2answers
92 views

What is the thought process behind, Endpoint protection is better than firewalls?

I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall. What ...
0
votes
0answers
17 views

Norton 360 blocking Windows 10 network share/printers if Default Block Microsoft Windows 2000 SMB is active

Tried asking via Norton's forums but would never let me post question. Norton 360 blocking Windows 10 network share/printers if Default Block Microsoft Windows 2000 SMB is active. Is anyone else ...
-1
votes
1answer
29 views

which antivirus best for window 10 on hp laptops? [closed]

which antivirus best for window 10 for security and virus protection specially for hp laptops.
1
vote
1answer
214 views

Kali.download website blocked by Kaspersky because of Trojan, is it safe?

So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website Do all Kali Linux operating systems try to download from this webpage (http://kali....
2
votes
2answers
228 views

How would one scan a large, untrusted file?

I've recently started to convince relatives to upload anything they download to Virus Total, to help them be more safe when downloading stuff. However, I have recently come across an installer for a ...
3
votes
1answer
147 views

How does malware stay undetected for months?

For my college course, I am currently researching how malware works and stays undetected from antivirus and users. I built a proof of concept that stays hidden at scan time and run time. If a hacker ...
1
vote
1answer
289 views

Antivirus warns about processes trying to access my webcam

For the last two weeks I am constantly getting notifications from my antivirus about attempts of using my webcam. I have always chosen "Block access", often after checking "remember for this ...
0
votes
3answers
112 views

Choice of Anti Virus Tool vs Anti Malware Tool?

We've had a breach in our network recently and we have been challenged over the the AV tool we are using. Because the malware/virus was cleaned (variant of Ransomware) by using an advanced anti ...
1
vote
2answers
75 views

What is the recommanded periodicity for antivirus RAM and disk scans?

Antivirus scans consumes resources, and far more when the full disk or RAM is scanned. Anyway, files are scanned before opening and often when they enter the system, so periodic scans on this point of ...
0
votes
2answers
106 views

Should antivirus be centralized?

We have hundreds of workstations, tens of servers, both Windows and Linux, in tens of premises, with centralized logs. And we have an internal rule that says the antivirus shall be centralized. I ...
1
vote
2answers
108 views

Can an ISP limit what security software (firewall) that will work?

My ISP (JCOM) says that McAfee is the only security software that will work with them. Is that true? The system is running Windows 7 Home Premium Japanese Version. The McAfee system is provided by ...
1
vote
2answers
177 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
-2
votes
2answers
55 views

Does Antivirus software upload files they find to their servers?

As the question suggests, do antivirus softwares running on a local machine upload files they find malicious to their own servers for further research and is there a privacy concern here?
3
votes
1answer
121 views

Information on the specifics of how behavioral antiviruses work?

I'm looking into security software and it seems like the Next Big Thing is behavioral antivirus. I'd like to try possibly making my own rinky-dink "next-gen behavioral AV" so I can gain a better ...
82
votes
7answers
15k views

Company claims hardwire connections are a security issue

Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
0
votes
1answer
125 views

Virustotal detecting threats in Suricata rule set

Virustotal scans are detecting threats from the Suricata default rule pack located https://rules.emergingthreats.net/open/suricata-4.0/ Is this a false positive? https://www.virustotal.com/#/file/...
3
votes
1answer
71 views

How does Windows knows a particular software is an AV?

First, I did some GoogleFu and came up with nothing. My question is: How does Windows 10 know things like McAfee, Symantec, AVG, etc are antivirus solutions? My assumption is that they set a ...
1
vote
3answers
43 views

Read Write Execute on infected thumb drives

There is some debate going on among my peers. With differing opinions regarding risk on infected thumb drive with limiting policies set on it. Question is Can you still get an infection with read ...
0
votes
1answer
448 views

Docker + AV on the host

I've dug through some history of this site (which inevitably means someone will post how I missed it) and didn't find anything directly relating to my question. What has been the typical solution ...
1
vote
0answers
75 views

Website marked as dangerous (phishing) in the past. How to get off blacklists? [duplicate]

One of our clients got his website infected almost a year ago. The site indeed contained some malicious files on the FTP server, and it got marked as dangerous, with suspicion of phishing attempts. A ...
0
votes
1answer
187 views

My system is being attacked or it is attacking

My system is running on Windows 10. I am using Avast Free Antivirus. Today i got an update from Windows update. After installing that update Avast started raising notification saying We've safely ...
1
vote
1answer
91 views

How (and where) to report a web site distribute a program with a virus?

I came across this free video converter program for Windows called Any video converter and installed it, my antivirus program immediately found a virus within it (Win32:Evo-gen). How and where can I ...
0
votes
1answer
321 views

(WMI Infections) Suspect behavior from scrcons.exe detected?

In almost every five minutes, I come out of the AVG avg stop downloading files and do not know which program wants to download these files. I have read this before WMI Infections So, i opened this ...
1
vote
1answer
174 views

Official recommendations for antivirus on Windows servers

I'm looking at rolling out agent based AV to around 1000 Windows servers across our estate. This feels like too much of a blanket approach. We have a mixture of services running - the usual things ...
7
votes
2answers
125 views

Do Transient, Volatile Servers Require Antivirus Scanners?

We are often asked whether we install antivirus software on our servers, specifically the kind of signature-based scanners that run on a schedule. Client security questionnaires and ISMSes often ...
0
votes
1answer
155 views

Firefox accuses of malware, but virustotal have 0 matches

I sometimes download PDFs on libgen and sometimes Firefox will acuse them of being malware with the advice "this file contains virus or malware" but gives no details. I've run several of these files ...
0
votes
2answers
119 views

While installing Go programming language trace.exe detected as virus by KAV

When I tried to install Go programming language, Kaspersky AV in my system detected a path to file: C:\Go\pkg\tool\windows_amd64\trace.exe as suspicious one and triggered a virus alert. my doubt is ...
1
vote
2answers
245 views

How to make a well-known malicious programs undetectable by anti-virus solutions? [closed]

I want to make well-known malicious programs, like Mimikatz and Incognito, undetectable by anti-virus solutions. I have already tried various approaches myself, like packing the binary with UPX or ...
1
vote
1answer
452 views

Should I get an antivirus for Linux Desktop

On a non-international forum I was reading a discussion about using an Antivirus on Linux Desktops. There are two opinions: 1. Anti-Virus is best-practise regardless of the OS used 2. Anti-Virus on ...
3
votes
1answer
58 views

Central console antivirus for Linux computers in LAN or equivalent solution

In our company, we need by policy AVs on every developers' Linux (Mint) computers. Right now we have ClamAV running on them, daily scheduled scans and every developer manually sends the report log to ...
0
votes
1answer
272 views

Filezilla for mac OS - Virus?

I hope this is the correct stack to post this. So I'm trying to download FileZilla for my macbook and I have McAfee installed, when I click in the download button, the antivirus flags it as Artemis!...
3
votes
1answer
568 views

How to detect malware in linux

Is there any way to detect rootkit/malware in linux servers? While for windows users the easiest way is to leave it for an antivirus/anti-malware application, but when you have a Linux machine that ...
1
vote
0answers
85 views

VBoxClient error in BitDefender rescue CD [closed]

I'm afraid that I am targetted by hackers. To resolve this, I'm now trying the BitDefender rescue CD. When starting it, I get the following error notification: VBoxClient: VirtualBox kernel ...
3
votes
0answers
136 views

How do I update Windows Defender to use old definition files?

I'm attempting to replicate a customer's issue locally. One of the differences is our Windows Defender definition file versions. The current version seems to be 1.269.694.0, and I'm looking for ...