Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

learn more… | top users | synonyms

2
votes
1answer
41 views

What might be the reason for an major antivirus software to not detect an malicious DNS entry?

I recently installed the trial version of Kaspersky as I had always a good impression of the features of their software. I also bought a 1 PC 1 year license, but didn't unsealed it yet as something ...
1
vote
1answer
24 views

Virus Infected: unable to open anti-virus web sites?

Recently I installed KMSPico, after that many unwanted softwares were installed on my system, later I uninstalled all of them and removed related folders. But strangely from my system I couldn’t open ...
1
vote
2answers
128 views

Where to download thousands of virus samples for AV testing?

I'm making an antivirus test just for my own, and I need thousands of malware samples (about 10k-30k, but the more the better). Please don't even mention Eicar test file because this will be a ...
3
votes
1answer
85 views

Can the HALT CPU instruction be used to stop attacks?

Not sure what the HALT CPU instruction is used for these days but I was thinking that if there was a kind of watchdog process that could determine if a computer had gotten infected and stop it right ...
-3
votes
1answer
76 views

A have virus in Avira Antivirus(macos) aescn.dylib file [closed]

I get a virus report from TrendMicro-HouseCall, that the file aescn.dylib(sha256 ae96a241177e0c46cd70892593eb7af5a76fad5175bfb76681a85bf270af777d) is a virus called Keypress-9. I checked it on ...
5
votes
1answer
67 views

Accepting Avast Antivirus MITM certificate “securely”

I have a multiplatform client plugin that has its own trust store (ie this client app does not trust the OS trust store) that is used to talk to a webservice over TLS. Clients that have Avast ...
0
votes
1answer
54 views

Is virus removal a security risk comparing to reinstalling everything from a clean source? [duplicate]

Why would it be a good idea to run a tool to remove a virus? You know that your system was compromised, but you don't know whether the antivirus tool will work.
-5
votes
1answer
101 views

Avira Antivirus acting as a virus [closed]

I have a Avira Antivirus installed on Windows 7. The problem is now when I click on any button or click to uninstall any program it redirects me to the Avira website where it says upgrade it for more ...
1
vote
2answers
72 views

If I can disable antivirus tamper protection, couldn't a malicious worm do it as well?

I was wondering how those client softwares protect themselves from worms / malwares etc. Symantec protects their files from malicious users / admins with the tamper protection mechanism, but sometimes ...
5
votes
1answer
68 views

Detecting Process Hollowing

I was brainstorming methods of detecting process hollowing and other forms of code injection, and this one seemed pretty robust. Would it be possible for a "process hollowing scanner" to enumerate ...
3
votes
3answers
138 views

Methods for determining if a file is encypted?

I am working on a anti-ransomware project. It simply monitors the filesystem, and watches for files being created, and deleted. (also monitors for known ransomware file extensions.) Basic Operation: ...
0
votes
2answers
172 views

How can you be sure that there is a virus on your computer?

Am I being paranoid? I'm seeing signs of a virus everywhere on my computers but I have no way of being sure. I've tried scanning with Windows Defender multiple times but haven't found anything. My ...
0
votes
1answer
66 views

Avast attempts to connect to the Internet when I try to download email [closed]

The file AVAST (Software\Avast\AvastSvc.exe) tries to connect when I check my email. When I forbid access to the internet for AvastSvc.exe, I can't connect to POP3 & SMTP. I'm not sure where all ...
2
votes
1answer
32 views

Server loaded with antivirus lets viral file go through

We have a .NET MVC website with a WCF Service as a service layer. One of the feature that the service offers is the ability to upload documents. When we asked our security consultant to test our ...
10
votes
1answer
542 views

Are keyboard hooks inherently malicious?

My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE). ...
1
vote
1answer
48 views

May I install more than one anti ransomware on the same pc?

I installed Bitdefender anti ransomware free tool, but as I read: It is only good against CryptoWall and CTB-Locker. So I'd like to install some others, but I wonder: Is it recommendable to ...
0
votes
2answers
75 views

Mac OS X vulnerabilities and not having the need for an antivirus?

I have just read news about Mac OS X vulnerabilities and wondered why would people say that you don't need an antivirus if you are using a Mac? There are vulnerabilities in other operating systems ...
0
votes
2answers
134 views

The best way to prevent ransomware and virus? [closed]

I am using Avast free antivirus real time protection and weekly scan Malwarebytes free anti malware weekly scan Malwarebytes Anti-ransomware EMET good enough? Anything else I should do or choose ...
36
votes
4answers
4k views

Avast AV could read Firefox saved passwords

My friend uses Firefox's built-in password manager feature to save passwords for sites. Later, after installing Avast Free Antivirus there was a feature called Passwords on the Avast UI. When accessed ...
1
vote
2answers
48 views

What are the technical implementation differences between signature-based scanning and heuristic-based scanning?

Signature-based scanning works by comparing something to a database. So does this basically amount to scanning a file x for string foobar? I know heuristic-based scanning can detect new threats that ...
13
votes
4answers
4k views

Can I block viruses from a USB stick by scanning it before opening its folder?

I inserted my USB stick into a friend's PC which was full of viruses, malwares and adwares. Therefore I suppose they attacked my USB device as well. Now I want to use my USB device on my PC without ...
2
votes
1answer
70 views

What is quarantine

What antiviruses actually do when quarantining a malicious threat does it compress the file using some algorithm or just change the extension of the file or just move the file to a safer location
1
vote
2answers
73 views

VirusTotal desktop file uploader seems infected

I wanted to scan my process with VirusTotal.com and for this I downloaded vtuploader2.2.exe from their website. Before executing, I uploaded it to VirusTotal.com and scanned it for viruses to make ...
2
votes
1answer
82 views

What are the security implications of autorun and external drives?

I have some questions about the security implications of accessing internal and external storage since I cant find any more information on it from what I've read. I have read about a variety of ...
-4
votes
1answer
25 views

What security measures to be considered [closed]

First, I know kali Linux is not suitable for day to day work. Since I am using Windows PC with low ram so I didn't prefer installing it on a virtual machine. I have totally uninstalled my windows (I ...
0
votes
2answers
56 views

Protection against file distributed malware

Let's say I have one server called A which host an upload website which is connected at the network connection B. Let's say one of my clients uploads multiple .rar files of 1 MB (that contains malware ...
1
vote
1answer
51 views

Best appraoch to test inhouse firewall effectiveness

We have Fortigate 100D that has antivirus profiles enabled like SMPT, POP3 and IMAP. How one could make sure that the antivirus is working as expected ? For instance it seems that Fortigate has ...
1
vote
2answers
72 views

If signature based AV software is becoming obsolete, what is the home user to do?

Assuming one is a worried home user who keeps certain sensitive files, works on personal projects, and generally wants to ensure the integrity of their single system (to keep it simple), what's a user ...
4
votes
1answer
68 views

Thorough computer scan

I'd like to give my computer an overall deep scan against all kinds of malware. I was infected about a year ago and I feel like there may still be some hidden rootkit on my HDD or something like that....
78
votes
2answers
16k views

I'm a White Hat and I develop my own viruses. Should I report it when almost all scanners say the executable is safe?

I develop my own viruses for 'scientific' purposes, namely to see if they pass the test of Virustotal.com. They all do, except for one or two scanners. Is this considered something you should report ...
1
vote
2answers
117 views

How can someone know technically if antivirus provider tracks him? [closed]

Is there a technical way to make sure that your antivirus provider doesn't send any information from your computer? Is there a reliable list of antivirus providers that this issue was checked and it ...
0
votes
1answer
41 views

How Do AVs differentiate between normal cryptographic modules and viruses crypters

I have read that some viruses -in order to avoid AVs- use crypters to encrypt their code so that the AV can't detect them. so as a countermeasure, AVs are programmed to look for the crypter -in the ...
4
votes
1answer
77 views

Is there a name for an anti-virus station / kiosk?

I am not able to define the exact term for a station that is meant to scan whatever media coming from outside a company and that have the following specifications: The station should never be on any ...
2
votes
2answers
62 views

Why should anti-virus software scan on a file read?

I got a brand new PC today because I couldn't Bootcamp my Mac due to a shortage of disk space on its SSD. It had McAfee pre-installed on it, and, shortly afterward, I noticed a ton of performance ...
0
votes
2answers
186 views

What Is “Kaspersky Security Center Network Agent”?

I see this in the program list on my office laptop. I believe it is the antivirus software installed by the official networking staff but I don't see where it is in my windows. I never see any updates ...
0
votes
2answers
70 views

Antivirus connects to their server over port 80

I ran a netstat and noticed that my computer has an always-established connection with my anti-virus (Avast) over port 80. I haven't gone as far as to parse through it in Wireshark, so I can only ...
0
votes
1answer
90 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
2
votes
1answer
39 views

Moving Infected Files to Trash versus Quarantining them

When you run an AntiVirus, typically they give you the option of quarantining the infected files. I remember when I was a kid I would move them to the trash bin instead. My question is, which method - ...
0
votes
1answer
82 views

How would I prove a windows executable is not a false positive? [closed]

I am could looking looking at method that involves decompilation or hex editing but I am hoping something simpler is available, although fully willing to go down that path. The scenario I am trying ...
0
votes
1answer
94 views

Virus: Images get replaced on website [closed]

I have installed Windows 7 again on my laptop with Chrome as browser. The problem is that on different websites I visit, the actual images of the website get replaced with out of context images. It ...
4
votes
3answers
125 views

Are virus signatures different between antiviruses?

Are virus signatures different between antiviruses? For example, can a virus signature in Kaspersky differ from the signature associated to the same virus in Avast?
3
votes
1answer
107 views

Can I trust my antivirus' assessment of my computer as clean, if it previously found threats?

Yesterday, I went to my Recycle Bin (for the first time in a while) to purge a bunch of files I had sent there. When I clicked on the folder, my antivirus warned me of a trojan out of the blue. Later, ...
0
votes
2answers
240 views

Difference between antivirus and sandbox?

When reading about how antivirus and sandbox work, my understanding is that an AV scans a file to see whether it matches with known viruses signatures. Sandbox can be used to obtain the behaviors of a ...
10
votes
0answers
77 views

Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report [closed]

Tavis Ormandy of Google has recently discovered a critical TrendMicro design flaw identified in this bug report - TrendMicro node.js HTTP server listening on localhost can execute commands. The bug ...
7
votes
1answer
909 views

Is rooting an Android phone to install an anti-virus firewall worth it?

Some Android anti-virus offer a firewall like Avast or Comodo anti-virus but you need to have a root access to use them. However rooting an Adroid phone is often presented as a security risk. So: ...
4
votes
2answers
510 views

What is the difference between a HIDS/HIPS and an anti virus?

I have gone through what IDS/IPS's are. I understand the difference between a NIDS/NIPS and a HIDS/HIPS. But Host IDS and Host IPS sound like an antivirus software to me, is there a difference?
0
votes
1answer
66 views

Is it a good idea to use two antivirus? [duplicate]

I read a "no two anti-virus" rule and I also read about how you can use two anti-virus programs, but you need to do some configuration. Is it worth it to run two anti-virus programs on one system and ...
4
votes
1answer
274 views

Antivirus constantly detecting tmp files as threats

Recently my antivirus has been constantly detecting threats and it's always tmp files. I delete maybe 50 of these files each day. A few days ago it detected a trojan. Last week it detected many '.json'...
-5
votes
1answer
49 views

Does AV Search Machine Code or Source?

When scanning a downloaded file, does AV search the malicious source code or assembly code to identify malicious code? Are there any online resources that give detailed analysis of how AV scans files,...
5
votes
1answer
102 views

How Can Malware Hide Using Cryptography

How is it possible for malicious programs to hide using polymorphic cryptography when programs must be first compiled into machine code? You cannot cryptographically hide machine code, can you? Then ...