Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

-1
votes
2answers
42 views

What is meaning of the term Whitelisting in antivirus?

How exactly does whitelisting work and what does it mean in terms of antivirus software?
0
votes
0answers
30 views

How does quarantine feature work internally in antivirus? [duplicate]

I'm struggling to find out the internal encryption and details of quarantined file. if any body knows the information please share.
0
votes
1answer
48 views

How to deal with possibility of viruses on Dropbox, Google Drive, external hard drive, etc?

For home use, what is the best way to deal with viruses that could be on external storage, which seems like a great way for hackers to persist on your system even after a reformat. Maybe the best ...
4
votes
1answer
51 views

How does “password / keyboard-input protection” work?

I do own Kaspersky Internet Security (KIS) and BestCrypt Volume Encryption (BCVE) (unrelatedly) and both offer some mechanism (KIS) to "protect my passwords while I enter them". Kaspersky primarily ...
0
votes
1answer
59 views

How does the quarantine of anti-virus/malware software work? [duplicate]

What is the quarantine of antivirus software? Is it just some strict user/group rights and changing file extension or is it an actual moving the file(s) to a virtual environment? How is this software ...
0
votes
1answer
82 views

How does Antivirus sandbox work?

Supposing we have a malicious .EXE which deletes (using DEL command with cmd) a sensitive system file. First, common antivirus will analysis the file with signature detection. Secondly, it will be ...
15
votes
4answers
1k views

Can AV software make sure quarantined files never get executed? [duplicate]

This Super User question made me ask, is it really a good idea to keep files in quarantine, when you don't know what they are yet? For what I know there are more or less 2 steps that need to be ...
1
vote
1answer
43 views

How does the recent discovered PowerPoint exploit work?

One of the recent blogs in Project Zero described a bug in the Symantec virus scanner in relation with PowerPoint files. But I do not understand how the rounding up to the length of the cache can ...
0
votes
0answers
57 views

Trying to build an offline virus total type product

I have been tasked with finding a way to scan a file using multiple AV products. The machines this is to be used on cannot be connected to the web, due to lab restrictions and the AV products cannot ...
3
votes
1answer
62 views

What might be the reason for an major antivirus software to not detect an malicious DNS entry?

I recently installed the trial version of Kaspersky as I had always a good impression of the features of their software. I also bought a 1 PC 1 year license, but didn't unsealed it yet as something ...
1
vote
2answers
50 views

Virus Infected: unable to open anti-virus web sites?

Recently I installed KMSPico, after that many unwanted softwares were installed on my system, later I uninstalled all of them and removed related folders. But strangely from my system I couldn’t open ...
2
votes
2answers
168 views

Where to download thousands of virus samples for AV testing?

I'm making an antivirus test just for my own, and I need thousands of malware samples (about 10k-30k, but the more the better). Please don't even mention Eicar test file because this will be a ...
3
votes
1answer
98 views

Can the HALT CPU instruction be used to stop attacks?

Not sure what the HALT CPU instruction is used for these days but I was thinking that if there was a kind of watchdog process that could determine if a computer had gotten infected and stop it right ...
-3
votes
1answer
82 views

A have virus in Avira Antivirus(macos) aescn.dylib file [closed]

I get a virus report from TrendMicro-HouseCall, that the file aescn.dylib(sha256 ae96a241177e0c46cd70892593eb7af5a76fad5175bfb76681a85bf270af777d) is a virus called Keypress-9. I checked it on ...
5
votes
1answer
77 views

Accepting Avast Antivirus MITM certificate “securely”

I have a multiplatform client plugin that has its own trust store (ie this client app does not trust the OS trust store) that is used to talk to a webservice over TLS. Clients that have Avast ...
0
votes
1answer
58 views

Is virus removal a security risk comparing to reinstalling everything from a clean source? [duplicate]

Why would it be a good idea to run a tool to remove a virus? You know that your system was compromised, but you don't know whether the antivirus tool will work.
-5
votes
1answer
233 views

Avira Antivirus acting as a virus [closed]

I have a Avira Antivirus installed on Windows 7. The problem is now when I click on any button or click to uninstall any program it redirects me to the Avira website where it says upgrade it for more ...
1
vote
2answers
80 views

If I can disable antivirus tamper protection, couldn't a malicious worm do it as well?

I was wondering how those client softwares protect themselves from worms / malwares etc. Symantec protects their files from malicious users / admins with the tamper protection mechanism, but sometimes ...
7
votes
2answers
113 views

Detecting Process Hollowing

I was brainstorming methods of detecting process hollowing and other forms of code injection, and this one seemed pretty robust. Would it be possible for a "process hollowing scanner" to enumerate ...
3
votes
3answers
146 views

Methods for determining if a file is encypted?

I am working on a anti-ransomware project. It simply monitors the filesystem, and watches for files being created, and deleted. (also monitors for known ransomware file extensions.) Basic Operation: ...
0
votes
2answers
197 views

How can you be sure that there is a virus on your computer?

Am I being paranoid? I'm seeing signs of a virus everywhere on my computers but I have no way of being sure. I've tried scanning with Windows Defender multiple times but haven't found anything. My ...
0
votes
1answer
70 views

Avast attempts to connect to the Internet when I try to download email [closed]

The file AVAST (Software\Avast\AvastSvc.exe) tries to connect when I check my email. When I forbid access to the internet for AvastSvc.exe, I can't connect to POP3 & SMTP. I'm not sure where all ...
2
votes
1answer
42 views

Server loaded with antivirus lets viral file go through

We have a .NET MVC website with a WCF Service as a service layer. One of the feature that the service offers is the ability to upload documents. When we asked our security consultant to test our ...
10
votes
1answer
569 views

Are keyboard hooks inherently malicious?

My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE). ...
1
vote
1answer
54 views

May I install more than one anti ransomware on the same pc?

I installed Bitdefender anti ransomware free tool, but as I read: It is only good against CryptoWall and CTB-Locker. So I'd like to install some others, but I wonder: Is it recommendable to ...
0
votes
2answers
85 views

Mac OS X vulnerabilities and not having the need for an antivirus?

I have just read news about Mac OS X vulnerabilities and wondered why would people say that you don't need an antivirus if you are using a Mac? There are vulnerabilities in other operating systems ...
0
votes
2answers
160 views

The best way to prevent ransomware and virus? [closed]

I am using Avast free antivirus real time protection and weekly scan Malwarebytes free anti malware weekly scan Malwarebytes Anti-ransomware EMET good enough? Anything else I should do or choose ...
36
votes
4answers
4k views

Avast AV could read Firefox saved passwords

My friend uses Firefox's built-in password manager feature to save passwords for sites. Later, after installing Avast Free Antivirus there was a feature called Passwords on the Avast UI. When accessed ...
1
vote
2answers
53 views

What are the technical implementation differences between signature-based scanning and heuristic-based scanning?

Signature-based scanning works by comparing something to a database. So does this basically amount to scanning a file x for string foobar? I know heuristic-based scanning can detect new threats that ...
13
votes
4answers
4k views

Can I block viruses from a USB stick by scanning it before opening its folder?

I inserted my USB stick into a friend's PC which was full of viruses, malwares and adwares. Therefore I suppose they attacked my USB device as well. Now I want to use my USB device on my PC without ...
3
votes
1answer
100 views

What is quarantine?

What do antiviruses actually do when quarantining a malicious threat? Does it compress the file using some algorithm, does it just change the extension of the file, or does it just move the file to a ...
1
vote
2answers
78 views

VirusTotal desktop file uploader seems infected

I wanted to scan my process with VirusTotal.com and for this I downloaded vtuploader2.2.exe from their website. Before executing, I uploaded it to VirusTotal.com and scanned it for viruses to make ...
2
votes
1answer
82 views

What are the security implications of autorun and external drives?

I have some questions about the security implications of accessing internal and external storage since I cant find any more information on it from what I've read. I have read about a variety of ...
-4
votes
1answer
25 views

What security measures to be considered [closed]

First, I know kali Linux is not suitable for day to day work. Since I am using Windows PC with low ram so I didn't prefer installing it on a virtual machine. I have totally uninstalled my windows (I ...
0
votes
2answers
56 views

Protection against file distributed malware

Let's say I have one server called A which host an upload website which is connected at the network connection B. Let's say one of my clients uploads multiple .rar files of 1 MB (that contains malware ...
1
vote
1answer
55 views

Best appraoch to test inhouse firewall effectiveness

We have Fortigate 100D that has antivirus profiles enabled like SMPT, POP3 and IMAP. How one could make sure that the antivirus is working as expected ? For instance it seems that Fortigate has ...
1
vote
2answers
75 views

If signature based AV software is becoming obsolete, what is the home user to do?

Assuming one is a worried home user who keeps certain sensitive files, works on personal projects, and generally wants to ensure the integrity of their single system (to keep it simple), what's a user ...
4
votes
1answer
68 views

Thorough computer scan

I'd like to give my computer an overall deep scan against all kinds of malware. I was infected about a year ago and I feel like there may still be some hidden rootkit on my HDD or something like that....
78
votes
2answers
16k views

I'm a White Hat and I develop my own viruses. Should I report it when almost all scanners say the executable is safe?

I develop my own viruses for 'scientific' purposes, namely to see if they pass the test of Virustotal.com. They all do, except for one or two scanners. Is this considered something you should report ...
1
vote
2answers
119 views

How can someone know technically if antivirus provider tracks him? [closed]

Is there a technical way to make sure that your antivirus provider doesn't send any information from your computer? Is there a reliable list of antivirus providers that this issue was checked and it ...
0
votes
1answer
41 views

How Do AVs differentiate between normal cryptographic modules and viruses crypters

I have read that some viruses -in order to avoid AVs- use crypters to encrypt their code so that the AV can't detect them. so as a countermeasure, AVs are programmed to look for the crypter -in the ...
4
votes
1answer
83 views

Is there a name for an anti-virus station / kiosk?

I am not able to define the exact term for a station that is meant to scan whatever media coming from outside a company and that have the following specifications: The station should never be on any ...
2
votes
2answers
70 views

Why should anti-virus software scan on a file read?

I got a brand new PC today because I couldn't Bootcamp my Mac due to a shortage of disk space on its SSD. It had McAfee pre-installed on it, and, shortly afterward, I noticed a ton of performance ...
0
votes
2answers
247 views

What Is “Kaspersky Security Center Network Agent”?

I see this in the program list on my office laptop. I believe it is the antivirus software installed by the official networking staff but I don't see where it is in my windows. I never see any updates ...
0
votes
2answers
73 views

Antivirus connects to their server over port 80

I ran a netstat and noticed that my computer has an always-established connection with my anti-virus (Avast) over port 80. I haven't gone as far as to parse through it in Wireshark, so I can only ...
0
votes
1answer
92 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
2
votes
1answer
43 views

Moving Infected Files to Trash versus Quarantining them

When you run an AntiVirus, typically they give you the option of quarantining the infected files. I remember when I was a kid I would move them to the trash bin instead. My question is, which method - ...
0
votes
1answer
83 views

How would I prove a windows executable is not a false positive? [closed]

I am could looking looking at method that involves decompilation or hex editing but I am hoping something simpler is available, although fully willing to go down that path. The scenario I am trying ...
0
votes
1answer
99 views

Virus: Images get replaced on website [closed]

I have installed Windows 7 again on my laptop with Chrome as browser. The problem is that on different websites I visit, the actual images of the website get replaced with out of context images. It ...
4
votes
3answers
132 views

Are virus signatures different between antiviruses?

Are virus signatures different between antiviruses? For example, can a virus signature in Kaspersky differ from the signature associated to the same virus in Avast?