Questions tagged [antivirus]

Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

Filter by
Sorted by
Tagged with
0
votes
1answer
515 views

Can ClamAV detect CSV Injection?

I'm allowing users to upload CSV files. Other users can download these files. I'm aware that CSV could be an attack vector. Would a ClamAV (or other AV) scan offer protection against such a file? ...
52
votes
10answers
19k views

Replacing Windows 7 security updates with anti-virus?

Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here. I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
3
votes
2answers
1k views

Do Anti-Virus programs scan running processes?

If I have malicious software running, and I can see it in the Task Manager, is an AV program expected to scan the processes running and test if they are a virus/malware? Or, does AV have to: Detect ...
2
votes
1answer
513 views

Real time Anti-virus communication with API hooks

I'm writing a simple user-space, real-time, anti-virus project, with normal permissions. Reading about many techniques an AV vendor works, I eventually chose to implement inline APIs hooks. I have ...
1
vote
1answer
4k views

Strange and unknown user name on Windows 10

Today I was through folder information and, when I switched to the security tab, I observed that there were 5 users listed there. In this list, there was also a user called "yupgyzmhuma". I tried ...
1
vote
0answers
58 views

Does Local API Hooks trigger Anti-Virus Flags? [closed]

If I do API hooking on my local Address Space (without doing dll injection on other process), will the AVs be triggered?
1
vote
1answer
117 views

Multiple outbound TCP/8333 connections containing the EICAR test string

An IPS / IDS / UTM detects 50 connections from a single client containing Virus/Worm Eicar test string within half an hour. The destinations are IP addresses all around the world on port TCP/8333. A ...
0
votes
2answers
1k views

Cmd shuts down computer immediately after windows boots up and logs into the default account/user [closed]

as the title suggests, after I login to default/main account which has administration privileges, after desktop loads almost instantly CMD opens and shuts down the computer, only way I found to stop ...
0
votes
1answer
557 views

How to analyze and track what data a software sends?

How can i track which program sends data over my network and can i see the contents of it? If we have a AV software installed in a VM , can we see what it's sending from your pc when doing a scan?
2
votes
1answer
93 views

What information can antivirus software collect?

If you take Dr web for example, it lists personal data and statistics, what do those mean? https://free.drweb.com/cureit/send_statistics/
3
votes
1answer
852 views

How does AVG insert its signature into Gmail emails?

I just sent an email from gmail loaded in my Chrome web browser. Also on the Windows 7 computer is AVG "anti-virus". Turns out AVG somehow managed to insert a signature into the email I sent out. ...
0
votes
4answers
196 views

Trend Micro showing security warning on website. Unsure how to resolve it

I have a client with a website that sells a book. When someone clicks a button to purchase the book, a form is supposed to pop up (and does). However, I received a screenshot showing that, when that ...
1
vote
1answer
236 views

Avast antivirus virus alarm while programming [closed]

I was programming a function pointer in C on CodeBlocks. When I compiled and ran it, Avast showed an alert message and quarantined the .exe. Is there a solution? Or do I need to disable Avast while ...
0
votes
2answers
1k views

How to hide a process in Windows?

Is there a way to make a process hidden without using any Administrator-level priviledges? I am building an antivirus which I want to protect from malware's actions, such as ending the process, or ...
0
votes
1answer
541 views

Knowledge Base about Windows Defender

I am trying to find more information on the alerts that come up from Windows Defender and include one of the following: Remediation Status: What is it?, what are all the different types? and what ...
0
votes
1answer
7k views

Bitdefender showing lot of Getting Suspicious Connection Blocked from Chrome extension Toby

I'm using GetToby Chrome extension to manage my tabs and save them for later. Lately, I've been getting lots of notifications from BitDefender about blocked suspicious attempt: chrome.exe attempted ...
149
votes
19answers
42k views

Has it been mathematically proven that antivirus can't detect all viruses?

What analysis was Bruce Schneier referencing when he wrote: Viruses have no “cure.” It’s been mathematically proven that it is always possible to write a virus that any existing antivirus program ...
-1
votes
1answer
62 views

How does an antivirus flag homemade malware? [duplicate]

Say I made some malware in python or c# or whatever language, How would an antivirus detect that the program has malicious intent because how does the antivirus know that the program is malicious ...
2
votes
1answer
2k views

Why does windows defender scan my computer multiple times [closed]

Occasionally, Windows Defender sends me a notification that my device was scanned. This occurrence is quite ordinary and boring, but I actually devoted two seconds to reading the entire message once, ...
1
vote
1answer
197 views

Explaining malware avoidance tactics

Most "how tos" regarding malware list this: Install Antivirus software. Install latest antivirus software. Run antivirus software regularly. Install latest operating system. Install any patches to ...
2
votes
1answer
6k views

How to (temporarily) disable McAfee Endpoint Security on an enterprise workstation? [closed]

I need to temporarily disable McAfee Endpoint Security on an enterprise workstation after having obtained local administrative privileges. The McAfee Endpoint Security settings are protected by a ...
3
votes
3answers
233 views

Why does VirusTotal have two different reports for the same hash depending on FILE vs URL submission?

Why would the same SHA256 Hash of a file have totally different VirusTotal results at the same time? Submitting a file to VirusTotal via File upload results in numerous hits for malware. ...
3
votes
0answers
3k views

Where is the Administrator password for McAfee Endpoint Security stored on the local machine?

Where is the Administrator password for McAfee Endpoint Security stored on the local machine? I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
0
votes
0answers
228 views

Heuristics-based vs behavioral malware detection

I'm working on my thesis and I have a couple questions about differences between heuristics-based and behavioral malware detection. Does heuristics-based detection rely only on statically examining ...
1
vote
0answers
288 views

How to prevent the ransomware to run with administrator privileges?

We have been attacked by the ransomware recently (adobe li). The strange thing is that ransomware was able to gain unimaginable high privileges. The virus of the ransomware has been located on the ...
0
votes
1answer
327 views

Does Windows 10 provide sufficient virus and threat protection? [closed]

I am configuring a new laptop with Windows 10 Home and trying to determine if it is necessary to buy one of the big antivirus packages such as Norton, McAfee, etc. Is the security software that comes ...
1
vote
2answers
80 views

What risks do I take using an application that always requires admin access and AV exception listing?

My knowledge level about OSs and security is extremely low. Is anyone willing to tell me whether it's risky for me to use an application that requires me to run it with admin permissions and to put it ...
2
votes
1answer
210 views

How does Malwarebytes intercept web traffic?

I use Malwarebytes and the web filter functionality puzzles me. As far as my research has found, antivirus engines typically use a proxy to intercept web requests which typically there would be ...
1
vote
2answers
64 views

How to protect your anti virus program or logging agent?

its a very simple question but might not be too trivial. Imagine an attacker has access to your device and gained SYSTEM privilege. Your company has installed a logging agent on your device to capture ...
0
votes
2answers
246 views

Is Kaspersky Total Security a good choice against malware? [closed]

I've been using Kaspersky Total Security for quite some time even though I'm not an Information Security professional, I heard it was considerably efficient. Yesterday, though, I was navigating ...
-1
votes
1answer
157 views

Online traffic monitoring by ISP for safety purposes [closed]

I have a question regarding approach to online security and protection against viruses, malware and phishing by one of the biggest European ISP. Below you will find my understanding of the topic. Is ...
0
votes
1answer
433 views

Do SSL proxies such as those from antivirus vendors hijack client processes?

In an attempt to understand the topic further, the following posts were reviewed. Why is 'avast! Web/Mail Shield Root' listed as CA for google.com? Are the certificates from “skype click to call” ...
-1
votes
1answer
334 views

System Infected: Trojan.Naid Activity [closed]

We have Tomcat 6 in the production server with Symantec Endpoint Protection on windows server 2008 server datacenter. Symantec showing following lines in logs [SID: 27068] System Infected: Trojan....
3
votes
2answers
302 views

Malware Author's Mindset

I'm studying common malware characteristics, and I'm having a bit of difficulty understanding the design choices the malware authors make. Many of said choices seem to revolve around making life ...
0
votes
2answers
120 views

What is the thought process behind, Endpoint protection is better than firewalls?

I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall. What ...
-1
votes
1answer
120 views

which antivirus best for window 10 on hp laptops? [closed]

which antivirus best for window 10 for security and virus protection specially for hp laptops.
4
votes
1answer
5k views

Kali.download website blocked by Kaspersky because of Trojan, is it safe?

So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website Do all Kali Linux operating systems try to download from this webpage (http://kali....
4
votes
2answers
20k views

How would one scan a large, untrusted file?

I've recently started to convince relatives to upload anything they download to Virus Total, to help them be more safe when downloading stuff. However, I have recently come across an installer for a ...
3
votes
1answer
276 views

How does malware stay undetected for months?

For my college course, I am currently researching how malware works and stays undetected from antivirus and users. I built a proof of concept that stays hidden at scan time and run time. If a hacker ...
2
votes
1answer
921 views

Antivirus warns about processes trying to access my webcam

For the last two weeks I am constantly getting notifications from my antivirus about attempts of using my webcam. I have always chosen "Block access", often after checking "remember for this ...
0
votes
3answers
283 views

Choice of Anti Virus Tool vs Anti Malware Tool?

We've had a breach in our network recently and we have been challenged over the the AV tool we are using. Because the malware/virus was cleaned (variant of Ransomware) by using an advanced anti ...
1
vote
2answers
102 views

What is the recommanded periodicity for antivirus RAM and disk scans?

Antivirus scans consumes resources, and far more when the full disk or RAM is scanned. Anyway, files are scanned before opening and often when they enter the system, so periodic scans on this point of ...
0
votes
2answers
164 views

Should antivirus be centralized?

We have hundreds of workstations, tens of servers, both Windows and Linux, in tens of premises, with centralized logs. And we have an internal rule that says the antivirus shall be centralized. I ...
1
vote
2answers
152 views

Can an ISP limit what security software (firewall) that will work?

My ISP (JCOM) says that McAfee is the only security software that will work with them. Is that true? The system is running Windows 7 Home Premium Japanese Version. The McAfee system is provided by ...
1
vote
2answers
193 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
-2
votes
2answers
64 views

Does Antivirus software upload files they find to their servers?

As the question suggests, do antivirus softwares running on a local machine upload files they find malicious to their own servers for further research and is there a privacy concern here?
3
votes
1answer
134 views

Information on the specifics of how behavioral antiviruses work?

I'm looking into security software and it seems like the Next Big Thing is behavioral antivirus. I'd like to try possibly making my own rinky-dink "next-gen behavioral AV" so I can gain a better ...
81
votes
7answers
16k views

Company claims hardwire connections are a security issue

Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
0
votes
1answer
1k views

Virustotal detecting threats in Suricata rule set

Virustotal scans are detecting threats from the Suricata default rule pack located https://rules.emergingthreats.net/open/suricata-4.0/ Is this a false positive? https://www.virustotal.com/#/file/...
3
votes
1answer
161 views

How does Windows knows a particular software is an AV?

First, I did some GoogleFu and came up with nothing. My question is: How does Windows 10 know things like McAfee, Symantec, AVG, etc are antivirus solutions? My assumption is that they set a ...

1 2 3
4
5
14