Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [antivirus]

Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

Windows Defender SmartScreen Heuristics

Question Is there a clear list of the high level heuristics used by Windows Defender SmartScreen when deciding what files to block? Context Our in house developers have built an electron app which ...
JohnLBevan's user avatar
0 votes
1 answer
110 views

Kaspersky silently inserting script tags in my downloaded files [closed]

I was working on a restricted system today and needed to take some html to an internet computer. I emailed the html file to my gmail and opened the html file and immediately noticed that a script tag ...
ChopperOnDick's user avatar
0 votes
1 answer
136 views

Is an antivirus needed for linux home usage when there is exchange of files with other OS e.g. Windows?

I was under the impression that an antivirus for Linux makes sense only for installing in business computers. Checking Norton/BitDefender/Karpesky I don't see any Linux option for the first or any non ...
Jim's user avatar
  • 183
0 votes
1 answer
140 views

How are virus or exploits tested without being detected?

I was wondering how threat actors actually test their exploits without them being automatically detected and added to the library of an antivirus detection system, thereby being marked as useless and ...
birdd's user avatar
  • 41
0 votes
0 answers
115 views

How to force persistent privacy & security best practice settings on Windows

Some of you might know privacy.sexy. It gives you plenty of options regarding your Windows privacy and security settings. However, after a major Windows update, those settings will be reset by Windows....
Dr3xler's user avatar
  • 308
4 votes
4 answers
7k views

Zero-day prevention. Is there a Windows program that encrypts files on-the-fly, keeping only the currently open file decrypted?

I'm looking for a program for Windows that can securely store my code. The program should be able to encrypt my files on-the-fly, such that only the file I'm currently using is kept decrypted (mainly ...
xia's user avatar
  • 49
-1 votes
1 answer
125 views

Can I use a program with a virus safely after I quarantine its virus?

I used to use a program for a long time, but then I found out the program (allegedly) had a virus so I went into Programs and deleted all of its files (without an antivirus). But I really like that ...
Zeerak Nasir's user avatar
1 vote
0 answers
111 views

Can a file contain a virus that an antivirus cannot detect? [duplicate]

Suppose that I have an external storage (such as a USB memory stick or an SD card) which contains some files (such as documents or images). Suppose that I am running an antivirus which scans drives ...
Ender Wiggins's user avatar
0 votes
2 answers
136 views

Offline Anti-Virus Scan for Server

I've got an application that isn't very robust and, as a result, is very sensitive to anti-virus scanning. I tried both the basic/free Windows Defender and a NextGenAV (i.e., SentinelOne). Both had ...
tyler's user avatar
  • 1
1 vote
1 answer
132 views

How to tell if BlackByte NT ransomware is on my computer?

The company I work at sadly fell victim to BlackByte NT ransomware this week. It ransomed many of the Windows machines on our factory floor. I have used my personal laptop (Windows 10 Home, version ...
Intrastellar Explorer's user avatar
0 votes
0 answers
103 views

help in understanding hybrid analysis results? Mac

So I have a few PDFs on my computer I got online a few years ago on my Mac computer. When I ran a virus total scan on some of them I got a couple that were concerning. Here is the one that most ...
DELL_GONEEE's user avatar
0 votes
1 answer
84 views

Reaper distributed patch dissemination design

Academic literature describes a method for distributing benevolent patches "in which every newly patched node forwards the patches to some or all of its neighbors according to a well-designed ...
charmoniumQ's user avatar
0 votes
0 answers
287 views

Sophos home blocks explorer.exe from encrypting several files (ransomware?)

Here's what happened: I was transferring a quite large number of small files (.CSV, .PNG above all) from an old USB stick that never gave me any problem from one (allegedly safe) laptop (win10, win ...
user9875321__'s user avatar
1 vote
1 answer
156 views

Understanding XDR Detection Methods

I'm interested in security and redteaming in particular, and as I'm learning about the subject I'm trying to find out what kind of things a blue team EDR/XDR solution will look for as part of its ...
Rajman's user avatar
  • 11
0 votes
1 answer
108 views

Any (opensource) tool that we can use to detect if our computers has been installed applications that have proxies services

Read something like this on reddit "someone can also be a regular user who does not read terms and conditions of apps that they install. Some apps might include code that will enable them to run ...
Maxfield's user avatar
  • 157
1 vote
1 answer
207 views

How outgoing tunnels are not stopped by AV or firewalls?

How can an attacker with initial access to a server behind a firewall, which only has SSH, HTTPS, and HTTP ports open, maintain remote access to the server even after the SSH port is closed by the ...
Akam's user avatar
  • 1,357
2 votes
1 answer
624 views

How does the AV inject their own DLL in each new process?

I know that most of the AV are injecting their own DLL in order to do userland API filtering, in functions such as WriteProcessMemory or CreateRemoteThread. But how can they do that? Because from what ...
Luhko's user avatar
  • 161
1 vote
1 answer
1k views

Validate File Uploads in PHP: PDFs and images

We're trying to secure our upload forms in PHP regarding image uploads and PDF files. For this purpose, we're currently trying to do the following in all cases, according to our research done so far: ...
DevelJoe's user avatar
  • 141
1 vote
0 answers
84 views

Best practice: checking backups of CMS-websites for viruses (code, database, and files)?

I've got backup files of several CMS-based websites on my local computer (Microsoft Windows) that need to get checked for viruses. Are there anti-virus scanners that catch viruses in the code, in ...
Madamadam's user avatar
  • 111
0 votes
1 answer
248 views

Do viruses survive in other drive and than re infect after resetting the PC?

Backstory: I got infected while installing some shady software and at that time I kept Windows Defender off, (I have very much faith on my shady website) by turning its features off. But when I ...
newperson's user avatar
0 votes
2 answers
451 views

Chance of virus/malware and non-executable files

I’ve seen this question being asked so many times, but I still have questions. I know that to execute malicious code from non-executable files such as videos (mp4), audios (mp3) and documents (pdf), ...
user289651's user avatar
0 votes
1 answer
129 views

Using a program that likely has a trojan horse? [closed]

OP wants to back up his Blu-ray/4K collection to a HDD. OP suspects that a very popular program that makes MKVs is actually a trojan horse that infects host computer's USB drives, which can later be ...
IntermediaryTypeOfDude 's user avatar
0 votes
0 answers
300 views

Font file flagged as malicious by antivirus

BitDefender (Free edition) for Windows identified the CascadiaCode.ttf font file as malware and moved it from the Fonts folder into quarantine. My Windows 11 install is like a day old, so maybe it's ...
Eliezer's user avatar
  • 101
1 vote
0 answers
66 views

In CiscoAMP can one determine how long the scan of a file took based on the times between scans in history.db?

We need to prove to our corporate security that scans in AMP are hurting our business. I found the following old documentation on FireAMP, which seems to indicate you can extract information on what ...
leeand00's user avatar
  • 1,441
0 votes
1 answer
340 views

Malicious python packages and antivirus

I just learnt that in PyPi you can find malicious python packages. For example, you could install a package and in the setup.py there could be code that search for your ssh or aws keys and send them ...
alepic's user avatar
  • 1
-1 votes
1 answer
761 views

How can Firefox scan a downloaded file for virus

I was downloading a simple metasploit file from a CTF writeup when Firefox prevented the download: "File contains a virus or a malware". I was working on my Linux without any antivirus ...
RudeusGreyrat's user avatar
2 votes
1 answer
182 views

When a detection tool fires no alert, how to tell the difference if the environment is safe or just something is wrong with the tool

For example, if an antivirus gives no alert for a couple of months, how do you confirm if the antivirus is working to prevent viruses, and not just hung?
n0obiscuitz's user avatar
0 votes
1 answer
155 views

Is it safe to copy an encrypted file from quarantine to another computer for analysis?

Is it safe to configure the antivirus to automatically copy the file from the quarantine to a network share? The antivirus should copy the encrypted archive (with password intact) from the quarantine ...
Jay_Laront's user avatar
0 votes
1 answer
182 views

Does email provider scan mails for viruses?

Imagine I am on [email protected] and I send a mail to [email protected] with an eicar.txt as an attachement. Will the email be stopped because it contains the eicar.txt ? In case there is an email ...
Rudeus's user avatar
  • 1
0 votes
0 answers
96 views

How do high-quality antiviruses recognize viruses? [duplicate]

How do high-quality antiviruses recognize viruses? I heard that such programs use virus databases. How high quality can an antivirus that uses free databases be, which databases are the best among ...
Joseph Conrad's user avatar
1 vote
0 answers
844 views

What does it mean when Google anti-virus engine reports "Detected"?

I need to convert a ton of directories of JPEGs into PDFs or EPUBs. So I downloaded this: https://ci.appveyor.com/project/josch/img2pdf/build/artifacts Being scared that it might be malware, as any ...
Tazeem S's user avatar
1 vote
0 answers
92 views

Can you exclude scanning of a particular app or file on Avast Antivirus for Samsung?

I have Avast pro for my Samsung. I searched the whole app but I cant find the option to exclude/whitelist an app or file from scanning. Is there such an option for android? I looked through their ...
nikak's user avatar
  • 11
1 vote
1 answer
121 views

Can I trust companies that test antimalware software? [closed]

Do they lie? I mean companies something like AV-TEST, AV-Comparatives, Virus Bulleting, ERG Effitas, etc.
Kristal's user avatar
  • 11
2 votes
0 answers
305 views

What is the most efficient way to get new executables whitelisted by Norton? [closed]

We developed an application (see https://embeetle.com). To avoid false positives, all our executables and DLLs are code-signed with an Extended Verification Code Signing Certificate from Sectigo. ...
K.Mulier's user avatar
  • 121
0 votes
1 answer
190 views

Windows Security deletes my USB virus as soon as I plug it in

I am studying ethical hacking and I work in the cybersecurity department of a company. I have been testing a hacking program but some PCs delete this executable as soon as I plug in the USB and some ...
Alex's user avatar
  • 1
0 votes
0 answers
224 views

Same miner detection by Kaspersky Anti-Virus after every boot up

I recently bought and downloaded Kaspersky. Since I downloaded it, after every reboot, it keeps detecting what seems to be a crypto miner. Every time it claims to delete it. Should I be worried ? Name:...
Youssef Mohamed's user avatar
0 votes
3 answers
2k views

Is it safe to use pirated software if AVs don't detect anything malicious about it?

I want to know whether it's safe to use a pirated software if during all of the processes including (downloading, running installer, installing, using and scanning installed files) the system's ...
user avatar
2 votes
1 answer
127 views

Signature-based antivirus for mobile devices is impossible?

In the OWASP MASVS it says: Smartphones are like small computers, and mobile apps are just like classic software, so surely the security requirements are similar? But it doesn’t work like that. ...
security94's user avatar
0 votes
1 answer
287 views

What are the best security practices when when using VirtualBox on Windows 11 with an old OS?

Got a cheap new laptop to play old games with a VM of Windows XP/7, with the host being Windows 11. Using a WiFi that isn't my own (as I don't plan on connecting to the internet with this laptop) I ...
larld's user avatar
  • 1
0 votes
1 answer
366 views

No antiviruses scan graphics cards VRAM for malware?

As I know, for antiviruses the VRAM is a blindspot, so casual Windows users like me can't do much about it. They have an antivirus, which doesn't even search for malware in VRAM. What's the answer for ...
kiec00's user avatar
  • 39
0 votes
2 answers
1k views

What exactly is Application.Hacktool.AMZ?

I have been using Windows Product Key Viewer for ages to read current Windows' serial number. I had never any hack- or virus-related issue about this application. A few days ago I have installed ...
trejder's user avatar
  • 3,639
-1 votes
3 answers
285 views

Do some malware/viruses stay on the internet basically indefinitely?

Biological viruses stay in the population essentially indefinitely. We have immune systems, but this somehow doesn't cause virus strains to completely disappear after some time, as everyone's immune ...
user56834's user avatar
15 votes
6 answers
5k views

Is it acceptable to exclude folders in antivirus?

A technical problem has arisen, and the vendor's first suggested solution is to exclude the program's folders from our antivirus. There are multiple reasons I am hesitant to do so: Primarily: If a ...
Seymour Guado's user avatar
0 votes
0 answers
41 views

Why this Hello World exe flagged as malicious on Virustotal? [duplicate]

I am compiling the following source code: #include <stdio.h> int main() { printf("Hello World!"); } As you can see, it's just a normal program that print out Hello World! to ...
raspiduino's user avatar
0 votes
1 answer
288 views

Non executable virus?

Bitdefender detected .class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135 .tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
OverLordGoldDragon's user avatar
1 vote
1 answer
209 views

Are most viruses detected eventually?

My question is being asked in the case that I am currently infected. Many viruses are zero-day viruses, and in addition, I only occasionally install MalwareBytes, which seems to be the agreed-upon all ...
Sgt Stacker's user avatar
0 votes
1 answer
90 views

Is EDR the same as NGAV (next gen antivirus)?

I have searched online and still do not fully understand. Some sites treat them as different and others treat them as if they are the same. Can anyone please tell me if they are the same? Thank you
greenbay007845's user avatar
2 votes
0 answers
206 views

Kaspersky Total Security Data Vault encryption AES256 BUT with "effective key-length 56bit"

While comparing Kaspersky Total Security (KST) with Kaspersky Internet Security (KIS). One of the "extras" of KTS is the added "feature" of "Data Vaults", which "...
ARGYROU MINAS's user avatar
3 votes
0 answers
2k views

C# Hello World program detected as virus

I just wrote and compiled a Hello World program in C# (I'm using Visual Studio 2022) and when I sent the file to VirusTotal, 1 antivirus program detected the exe as unsafe (VirusTotal results of C# ...
Furkan125's user avatar
2 votes
2 answers
6k views

Microsoft Defender flagged Surfshark.exe as "Misleading:Win32/Lodi"

Can this be safely ignored? VirusTotal shows that Microsoft is the only security vendor that flagged this file as malicious. I did not modify my Surfshark installation in any way, except for an update ...
Marco Bischoff's user avatar

1
2 3 4 5
15