Questions tagged [antivirus]

Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

Filter by
Sorted by
Tagged with
-1
votes
0answers
64 views

Is there a non-Google VirusTotal alternative which actually works and doesn't harass me? [closed]

For quite a long time, I've been calculating hashes for files locally on my computer and then made requests such as: https://www.virustotal.com/ui/files/...
0
votes
1answer
56 views

Antivirus evasion for reverse tcp

I'm trying to do reverse tcp in an exe payload. To do antivirus evasion, I've tried to use Veil evasion, The fat rat, and also Phantom evasion, but even if the exe wasn't deleted by antivirus (I use ...
1
vote
1answer
73 views

Wiping a hard drive before reinstallation

A few years ago, I left a new laptop at a sketchy computer shop to downgrade the OS to Windows 7. The experience was a disaster. My goal now is to install Cinnamon Linux on the laptop and remove ...
0
votes
0answers
58 views

Does SandBoxie have a virus?

When I try to download SandBoxie in the 64-bit version, at this link: SandBoxie and I analyze it with VirusTotal, it tells me that it's safe, but when I analyze some relative files, called: ...
1
vote
2answers
137 views

Why don't antivirus definition files get detected as malware

I was wondering... if antiviruses store virus definition files that contain virus signatures then why wouldn't they get detected as malware by themselves or Windows Defender or any other AV out there?
2
votes
0answers
80 views

How do EDR prevent you from uninstalling even as local admin?

I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
2
votes
0answers
114 views

Using other programming languages for malware against EDR?

As an example, one of the most basic malware to inject into a process to get a C2 beacon goes like this: Get Handle of a process -> VirtualAllocEx -> WriteProcessMemory -> CreateRemoteThread ...
0
votes
2answers
122 views

What does the bizarre text mean at VirusTotal?

I downloaded Bitcoin Core from here: https://bitcoin.org/bin/bitcoin-core-0.20.0/bitcoin-0.20.0-win64-setup.exe I then uploaded it to VirusTotal: https://www.virustotal.com/gui/file/...
-2
votes
1answer
105 views

How am I supposed to interpret a VirusTotal result of “some engines think this is malware”? [closed]

I just scanned another installer/EXE with VirusTotal. I've come to depend on this crappy service owned by the evil Google, in spite of its ambiguous messages and extremely confusing interface, because ...
0
votes
0answers
40 views

How Do I Recover Files That Have Been Replaced By a Virus and Get Rid Of The Virus? [duplicate]

I was trying to open Adobe After Effects recently but it was taking a lot of time to load. I checked task manager and found several instances of the background process "Ashampoo Snap" opened....
0
votes
0answers
26 views

Invisible virus [duplicate]

Recently my brother brought a usb from his friends to copy stuff from and ended up infecting my pc in the process. I tried to solve the problem by installing kaspersky and doing a full scan of my ...
0
votes
0answers
25 views

API GET Request resulted in a Bitdefender thread alert

This is a very strange occurrence and could be a false alarm. I am testing an API from an advertisement network for my WPF desktop app. I made a GET request to this exact test link (generic sample ...
0
votes
0answers
37 views

Understanding Antivirus Sandbox limitations

The most advanced antiviruses fight against malware with different techniques, like signature-based detection and heuristic analysis. In case those two are bypassed by the malware, there is still the ...
0
votes
2answers
58 views

Porbable virus in Windows 10 [duplicate]

I have a windows 10 machine with AVG Free antivirus. Lately everytime I boot the machine up as soon as it gets to the desktop Chrome opens up on its own with a suspicios add to download stuff I do not ...
0
votes
0answers
66 views

Why don't antivirus detect malicious XSS files?

I have a system with an uploading file feature and it's protected by an antivirus that scans the uploaded files. The AV detects malicious files like EICAR files, msfvenom payloads...but not a JS file ...
1
vote
1answer
37 views

Determining if software installed onto vm is malware or not

I've tried searching for methods of scanning files within virtualbox, but most (if not all) of what I find is discussion about studying programs that are already known to be malware. I'm trying to ...
2
votes
1answer
457 views

Gmail warns about encrypted PDF file

I recently received a PDF file that, when attached to a gmail message, causes a warning to be displayed as follows: Encrypted attachment warning – Be careful with this attachment. This message ...
0
votes
1answer
77 views

Anti virus vs Anti malware? [duplicate]

What is the difference in anti malware like malwarebytes premium and an anti virus? Do I need both or would malwarebytes be enough?
-1
votes
1answer
66 views

What's considered a threat? [closed]

I have troubles to understand what is exactly a threat. If I've an antivirus able to catch some malware, is this malware still considered a threat to my computer.
0
votes
1answer
2k views

Windows Defender found threats in Kali Linux disc image

Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided ...
2
votes
1answer
86 views

Would an anti-virus software make any other processes consume more CPU?

Would an anti-virus software make any other processes that it scans to consume more CPU? We recently switched to a new Next-Gen, AI based Anti-Virus software. On couple of our Linux servers that runs ...
0
votes
2answers
66 views

Does antivirus software detect screen grabbing functionality in a running program?

Let's say a malicious actor publishes a piece of software that calls a screenshot function (e.g. Graphics.CopyFromScreen() or the UIAutomation Framework in .NET) every so often, but doesn't notify ...
3
votes
5answers
262 views

What are the benefits of enabling antivirus full scanning?

If AV auto-scan will detect and prevent the malware from executing why there is a need to enable schedule/full scans? I'm asking because a full scan can create sometimes overhead on the machine and ...
1
vote
1answer
244 views

Bypass AMSI Windows 10

I'm trying to run a powershell reverse shell on windows 10. Anyway everytime it is blocked by Wndows Defender. How can I bypass it? In a file I store the payload $client = New-Object System.Net....
0
votes
0answers
39 views

Shell scripts scanning tools

It has become common trend to use shell scripts from the web and directly run them: bash <(curl -sL some.random.website.com) I always view the script before running them. However, shell scripts ...
0
votes
0answers
115 views

Why does Kaspersky blocks a website saying untrusted root center

Why does Kaspersky antivirus blocks the website saying that it has untrusted root center when the root CA is Kasperksy itself and also the certificate status seems to be "OK". Figure-1 shows the ...
0
votes
1answer
97 views

Securely analyze and format a USB flash drive

I need to scan the contents of a USB stick with several antivirus software. I have several ways to do this. Either I mount the key, I scan its contents (I may place the suspicious files in ...
1
vote
1answer
82 views

What is the difference between a server and an appliance for PCI purposes?

I administer a few hundred servers and am going through a yearly PCI audit. This time around we need to prove that we've got anti-virus protection on our "systems commonly affected by malicious ...
2
votes
1answer
139 views

Is malware programmed in high-level language will be more detected than malware programmed in low-level language?

I would like to know if a simple malware designed to execute commands received by a C&C will have the same result rate if programmed in : lower-language like C++ high-language like Python (...
2
votes
1answer
1k views

Program compiled with mingw32 is reported as infected

I'm using a Linux system and cross-compiling to Win32. The most trivial Windows source code ("Hello world" by Petzold), when compiled using i686-w64-mingw32-gcc (gcc version 7.3-win32 20180312), ...
2
votes
1answer
88 views

As a Software Industry Editor, how to avoid my software being quarantined?

I'm a well established software company. For more than 30 years, my business has been delivering both hardware and software. My Windows software is being quarantined by some of my customer's ...
0
votes
3answers
705 views

How can Avast detect threats when I install Kali on VirtualBox?

I was installing Kali on VirtualBox on a W7 host, and during the upgrading/installation, Avast detected two threats in the Mimikatz package. My question is, how can Avast "see" through the VM? Is he ...
1
vote
0answers
12 views

How does Antivirus identify virus using signature-base? [duplicate]

I have read many articles about AV signature-based but I'm still not clear how AV using Hash to compared with the signature.
0
votes
1answer
59 views

Does a Windows 10 endpoint check software installations for malware if they are installed through GPO / SCCM / Software Center?

I'm trying to get a view on what extra security checks our packaging team could do when they download a potentially infected installer from the web before they package an MSI or EXE (assuming that the ...
0
votes
2answers
231 views

Is it secure to use TOR with AVAST antivirus?

Today when I opened an incognito session in Chrome Browser, I got an immediate pop-up from Avast antivirus: Should I be concerned that my antivirus is acting like spyware? I sometimes use the TOR ...
0
votes
0answers
49 views

How to test an enterprise antivirus

In our enterprise we have an antivirus solution but we are evaluating to pass to another solution. What could be a good strategy to test on our enviroment what antivirus solution works better?
1
vote
1answer
77 views

Antivirus/DPI Solution with openvpn server

I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
2
votes
2answers
454 views

Why is VirusTotal “unable to process file type” for files packed with Mpress?

Packed an AutoHotkey script with ahk2exe using MPress, got 13 hits on the VirusTotal online scan for the zipped result. Packed the same script with the same ahk2exe without MPress and got just 6 hits ...
2
votes
2answers
61 views

Behavior Monitoring in Endpoint Protection Platform

There are some EPP solutions that are considered very innovative (Crowdstrike, SentinelOne...) for the use of Behavior Monitoring. What is the difference with more standard EPP solution (ex. Symantec ...
0
votes
2answers
112 views

How to securely transfer files from a possibly infected WinXP machine to Linux?

There is an old Windows XP installation that was being used without even an antivirus. This WinXP computer has files. These files are important and should be moved to a Linux installation. Given the ...
1
vote
1answer
403 views

Pfsense security issues?

I have used pfsense before as the main gateway, load balancer, traffic shaping, proxy, firewall, virus/malware protection, enterprise wifi solution for an entire office of 50+ users. Yet I have ...
0
votes
1answer
85 views

Are there virus scanners for Windows that can be run without installation? [closed]

I wonder if there are virus scanners that can be run without installation. It would be very practical. Simply insert the USB pen drive and scan... It would be good if the scanner also detects malware....
0
votes
2answers
298 views

Can antivirus software detect if your PC is hooked to BeEF?

I recently discovered BeEF with which someone can gain access to another PC through XSS. I was wondering if antivirus software can detect when a PC get's hooked to BeEF.. An online search doesn't ...
0
votes
1answer
82 views

How to check big video file if can't check it entirely?

There size limit on VirusTotal, some videos are very big. What if cut off part from the video and send part of it. Is it possible? What part of it, where malware can be?
21
votes
2answers
4k views

How to remove quarantined virus securely?

There is a file found by antivirus program and it was put into the virus' quarantine section (its not a false positive). Now I don't know how to handle this "quarantined" files. What is the best ...
1
vote
2answers
166 views

Is it really necessary to remove other antivirus software before installing one?

I am currently trying to install Kaspersky Total Security, but it persistently asks me to uninstall all other antivirus software: McAfee Security Scan Plus and Avast Software(Free). They claim their ...
5
votes
4answers
363 views

How dangerous can a file be with no detected malware?

Let's say there is file which successfully passed all scans by all antivirus software there is on VirusTotal. Does it mean that it can't be dangerous. If no, what kind of dangers we can expect?
1
vote
1answer
410 views

Bypassing Windows Defender VBA custom code

I've recently written a simple keylogger using classic DLL-injection technique. I wanted to simulate a real phishing attack where the user opens an Office document with macros and by enabling them he ...
3
votes
3answers
252 views

Why is a fully-patched OS less important than AV?

How to explain to traditional people why they should upgrade their old Windows XP device? <- The interesting point made in the highest upvoted answer to this Q is that a fully patched OS is largely ...
2
votes
1answer
97 views

Wannacry testing in lab - Not getting SMB scan attempts

So I booted up two windows 7 64bit sp1 versions in virtualbox and shared their network and the operating systems are vulnerable to the SMB exploit that the wannacry ransomware is using. The Issue is ...

1
2 3 4 5
13