Questions tagged [antivirus]

Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

Filter by
Sorted by
Tagged with
1
vote
3answers
60 views

Read Write Execute on infected thumb drives

There is some debate going on among my peers. With differing opinions regarding risk on infected thumb drive with limiting policies set on it. Question is Can you still get an infection with read ...
0
votes
1answer
3k views

Docker + AV on the host

I've dug through some history of this site (which inevitably means someone will post how I missed it) and didn't find anything directly relating to my question. What has been the typical solution ...
1
vote
0answers
79 views

Website marked as dangerous (phishing) in the past. How to get off blacklists? [duplicate]

One of our clients got his website infected almost a year ago. The site indeed contained some malicious files on the FTP server, and it got marked as dangerous, with suspicion of phishing attempts. A ...
0
votes
1answer
758 views

My system is being attacked or it is attacking

My system is running on Windows 10. I am using Avast Free Antivirus. Today i got an update from Windows update. After installing that update Avast started raising notification saying We've safely ...
1
vote
1answer
111 views

How (and where) to report a web site distribute a program with a virus?

I came across this free video converter program for Windows called Any video converter and installed it, my antivirus program immediately found a virus within it (Win32:Evo-gen). How and where can I ...
0
votes
1answer
1k views

(WMI Infections) Suspect behavior from scrcons.exe detected?

In almost every five minutes, I come out of the AVG avg stop downloading files and do not know which program wants to download these files. I have read this before WMI Infections So, i opened this ...
1
vote
1answer
293 views

Official recommendations for antivirus on Windows servers

I'm looking at rolling out agent based AV to around 1000 Windows servers across our estate. This feels like too much of a blanket approach. We have a mixture of services running - the usual things ...
7
votes
2answers
188 views

Do Transient, Volatile Servers Require Antivirus Scanners?

We are often asked whether we install antivirus software on our servers, specifically the kind of signature-based scanners that run on a schedule. Client security questionnaires and ISMSes often ...
0
votes
1answer
1k views

Firefox accuses of malware, but virustotal have 0 matches

I sometimes download PDFs on libgen and sometimes Firefox will acuse them of being malware with the advice "this file contains virus or malware" but gives no details. I've run several of these files ...
-1
votes
3answers
308 views

While installing Go programming language trace.exe detected as virus by KAV

When I tried to install Go programming language, Kaspersky AV in my system detected a path to file: C:\Go\pkg\tool\windows_amd64\trace.exe as suspicious and triggered a virus alert. Shall I consider ...
1
vote
2answers
1k views

How to make a well-known malicious programs undetectable by anti-virus solutions? [closed]

I want to make well-known malicious programs, like Mimikatz and Incognito, undetectable by anti-virus solutions. I have already tried various approaches myself, like packing the binary with UPX or ...
2
votes
1answer
891 views

Should I get an antivirus for Linux Desktop

On a non-international forum I was reading a discussion about using an Antivirus on Linux Desktops. There are two opinions: 1. Anti-Virus is best-practise regardless of the OS used 2. Anti-Virus on ...
3
votes
1answer
156 views

Central console antivirus for Linux computers in LAN or equivalent solution

In our company, we need by policy AVs on every developers' Linux (Mint) computers. Right now we have ClamAV running on them, daily scheduled scans and every developer manually sends the report log to ...
1
vote
1answer
3k views

Filezilla for macOS - Virus?

I'm trying to download FileZilla for my MacBook and I have McAfee installed. When I click on the download button, the antivirus flags it as Artemis!70506fb398e5 so I decided to upload the file to ...
4
votes
1answer
2k views

How to detect malware in linux

Is there any way to detect rootkit/malware in linux servers? While for windows users the easiest way is to leave it for an antivirus/anti-malware application, but when you have a Linux machine that ...
1
vote
0answers
169 views

VBoxClient error in BitDefender rescue CD [closed]

I'm afraid that I am targetted by hackers. To resolve this, I'm now trying the BitDefender rescue CD. When starting it, I get the following error notification: VBoxClient: VirtualBox kernel ...
3
votes
0answers
354 views

How do I update Windows Defender to use old definition files?

I'm attempting to replicate a customer's issue locally. One of the differences is our Windows Defender definition file versions. The current version seems to be 1.269.694.0, and I'm looking for ...
4
votes
1answer
962 views

Why can RunPE Injection bypass Antivirus Software?

I informed myself about RunPe Injection and programmed my own runPE. Right on my first try, I was able to hide a meterpreter payload from my antivirus program (Avira Antivirus). The meterpreter ...
-4
votes
2answers
153 views

How to make a Virus Analyser? [closed]

want to create a program that can check a file and give output about file is in infected or not,also need to know what kind of infection that file have (ex : Trojan, worms, etc ) Is there a way to ...
2
votes
2answers
268 views

Integrate antivirus with a sandbox

When reading the Difference between antivirus and sandbox?, I came up with the idea of how to integrate a sandbox with AV. When the sandbox analyzes the sample and finds that the malware, antivirus ...
0
votes
0answers
40 views

Creating exceptions / rules for online backup programme

The desktop client for a backup provider i use called Backblaze is with very high CPU usage; around 60% of a 2.7ghz i7. I contacted Backblaze's support and they informed me that Avast anti virus and ...
1
vote
2answers
124 views

Is it insecure to use a single antivirus exclusion list?

I work in an organisation that struggles to manage and maintain services. We're rolling out an AV solution and I want to configure a single exclusion list across our entire estate to cover SQL, AD, ...
8
votes
3answers
365 views

What are the privacy conerns with cloud based submission in antivirus?

It seems like many antivirus programs use the cloud to scan files for malware. Isn't this a privacy concern if local files are being uploaded to the cloud? For example with Automatic Sample Submission ...
-1
votes
1answer
83 views

Standards and Guidelines Pro/Con Anti Malware programs

For a whitepaper about anti-malware products used in combination with (server side) applications and infrastructure components (database server) I am looking for standards, guidelines and codified ...
1
vote
0answers
240 views

Which Anti-Virus companies share their signature databases?

I recently heard that AVG and AVAST shared their malware signature databases (avast forum) Which AV vendors share their signature databases or use the same engine for detecting malwares? Based on ...
0
votes
2answers
309 views

Why does Kaspersky warn me about PHP trojans on a Mac?

I have a question regarding PHP Trojans on a Mac. I have downloaded a website's home directory which has been hacked to my local Mac. On this Mac I am running Kaspersky Internet Security which ran a ...
1
vote
1answer
203 views

Windows flags Microsoft Sysinternals .zip files as malicious

Downloaded sdelete v2.01 from official Microsoft website using Google Chrome on Windows 10 Pro: https://docs.microsoft.com/en-us/sysinternals/downloads/sdelete Basic info for SDelete.zip: SHA256: ...
17
votes
6answers
23k views

How can I safely back-up files from an infected computer?

Imagine a laptop that's been infected by malware, and that the owner hasn't backed-up their files.* They have pictures, videos, and documents they'd like to preserve, so they're hesitant to ...
114
votes
10answers
20k views

Alternatives to anti-virus for keeping oneself safe

I have read a lot of articles that talk about how using an AV is less safe than not having one for more intermediate PC users who are careful with what they click and download. For example, here are ...
10
votes
1answer
513 views

What is SpeedSurfing?

My Sophos antivirus detected what it calls "SpeedSurfing", and my Google-fu is failing me. The Chrome extension it deleted was Boomerang for Gmail.
1
vote
0answers
641 views

tool with rest api to scan base64 encoded files [closed]

I'm searching for a tool (antimalware / antivirus) that exposes a REST API and accept me to pass a base64 encoded file in order to check if it's a malicious one or not. I've tried the ClaimAV but it ...
2
votes
0answers
347 views

A Facebook impersonator uploaded pictures of me I never posted online. Now what? [closed]

Exposition One late night I was multi-tasking when a (trusted) friend sent me a link with text in a Facebook message he had apparently written. The preview of the link had a picture of me, and ...
-3
votes
2answers
196 views

How to prove that antivirus is capble of detecting and removing malware? [closed]

How can we check if any antivirus is capable of detecting, removing and protecting from the malware? Can it be verified by checking the configuration of the antivirus or by just doing a live scan? If ...
9
votes
1answer
2k views

Does Windows Update modify Hosts file?

I have Avira installed with Hosts file protection enabled. I've noticed a pattern where Avira warns me of an attempted modification of the Hosts file (but alas doesn't tell me which process did the ...
3
votes
1answer
688 views

Is Android anti-virus software necessary and helpful?

Is Android anti-virus software necessary and helpful? Can it actually prevent malware attacks on my system? Are there other good opportunities to block malicious software attacks? At home, I am ...
2
votes
1answer
100 views

How Do antiviruses decide whether a file is to be quarantined or not?

Situation: Trying to understand how an antivirus works. So when an antivirus finds a file with a hash value matching their database, it reports it as an infected file and would quarantine it. Problem:...
0
votes
1answer
109 views

Programmatically Quarantining files

Situation: Using Python to make a simple quarantine software for malware. What I know: I do understand (from this forum no less) that one of the ways is to put the file in a quarantine directory and ...
0
votes
2answers
310 views

Have I created some kind of malware? [closed]

I am quite new to this type of stuff and I'm experimenting a little bit. This weekend I had some spare time and decided to joke around with VBScript and powershell. What I did is I wrote a VBScript ...
5
votes
2answers
3k views

VirusTotal detects threats in Python Anaconda Build 3.6 - is it Reliable?

We are trying to install the Anaconda Python build 3.6, but our virus scanner is detecting possible Trojans and other security alerts in the binary. We find it hard to believe the build is ...
0
votes
1answer
59 views

functioning ( behavioural based ) of an antivirus [closed]

I know how signatures are used to detect malware samples of already known malware and techniques to apply to use. 1.What are some of the different behavioral techniques used by antivirus/anti-malware ...
6
votes
2answers
545 views

What security has OSX and why it does or does not need antivirus [duplicate]

Yes, I know it's a tricky question and a bit personal, but I really don't know much about the security that is in place by default in apple and I don't really know how secure it is and how it would ...
1
vote
1answer
105 views

Azure VPN Gateway Client - Reported as Win32/Detplock

When following this official guide to setup an Azure VPN Gateway, the downloaded VPN client application is reported as Win32/Detplock by windows defender. https://docs.microsoft.com/en-us/azure/vpn-...
4
votes
2answers
1k views

Can a PostScript .PS file contain a virus?

I was just given a postscript file containing what I was lead to believe was a document pertaining to some work I was being asked to consult on. Although it didn't seem to contain anything that ...
-1
votes
2answers
772 views

What is and how good is an ISP-provided antivirus?

Today I had my Internet provider to install Internet Fiber at my place. I've been asked whether I wanted the antivirus service. I am aware you can (and should) install an antivirus on your computer. ...
6
votes
2answers
616 views

AVG detects Kaspersky update files as infected (trojan, infected, malware)

(Note: update at end of Q) On a Mac, I am using AVG as the primary AV. In addition to this, I have a few scanners (Bitdefender and Malwarebytes) that I update and use periodically. Recently I decided ...
6
votes
3answers
923 views

Anti-virus evasion testing: using VM with AVs to test payload detection

Using a tool like veil or hyperion to evade an AV for pentesting, it's not advised to upload to virus total because it increases detection rate (and/or gets some special attentions). My understanding ...
-1
votes
2answers
85 views

How to protect against simple web distributed viruses

I work as a data recovery consultant and a surprisingly large number of my clients are individuals that caught a virus from "The Internet". A lot of people would browse dodgy websites, download all ...
4
votes
1answer
3k views

How SSH Deep Inspection works?

I just saw an option in Fortinet NGFW regarding, SSH Deep Inspection. So my question is how Deep inspection or whatever can inspect or find any malicious activity on encrypted packets?
4
votes
1answer
577 views

How can I write logical signature for ClamAV simillar as it is in YARA?

First of all, I know that yara rules can be used in combination with ClamAV, but here I have something else in my mind, so my question is; how can I write logical signature simillar as it is in YARA. ...
3
votes
0answers
264 views

My website is blacklisted by Kaspersky. Does that mean it's infected? [closed]

I've been noticing that an old website of mine is blacklisted for about a week on PCs running Kaspersky. Google seems to have dereferenced the homepage too. The explore as Google webmaster tool cannot ...

1
3 4
5
6 7
14