Questions tagged [antivirus]

Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.

Filter by
Sorted by
Tagged with
41
votes
4answers
6k views

Are there any known cases of antivirus software intentionally sending false alarms?

First things first, I'm not asking this question because of any specific alarm on my PC that I suspect to be false. It's just that from the perspective of the software industry, it would make some ...
1
vote
2answers
173 views

Different virus types of testing on a Windows VM [closed]

I am a masters student in computer science, and I need to do a project with virtual machine (host and guest both are Windows 10). The project is: Describe and experiment different methods to clean up ...
0
votes
1answer
199 views

Symantc Endpoint protection keeps detecting clean file as risk

I downloaded some files from website using FTP and these websites have been developed using .net and any .dll file is flagged as Risk by our Antivirus. our IT Made some changes to antivirus on my ...
7
votes
4answers
965 views

Why is there no easy heuristic protection against ransomware?

After the recent spread of the WannaCry ransomware - which proved one more time that this kind of attack is capable of causing serius damage and dangerous disruptions to critical services - I asked ...
0
votes
1answer
115 views

About Wikipedia section about Malware for AutoHotKey [closed]

I would appreciate your advice about the Wikipedia section about malware for AutoHotkey, please. Because AutoHotkey contains many powerful automation tools, it is sometimes used to create malicious ...
0
votes
1answer
48 views

Retrieve a deleted trojan by Kaspersky for analysis (on windows 7)?

After installation of Kaspersky on a windows machine, several trojan viruses where discovered and deleted. Now, I'm looking for a way to retreive those trojans deleted by kasperky. (to export them to ...
41
votes
3answers
8k views

Can anti-virus/virus protection be used to spy on you? [closed]

I'm a complete noob when it comes to these subjects. But here goes... Let's say someone is using a VPN, TOR, or some other tool to enhance their privacy. As I understand it, you are discouraged from ...
1
vote
3answers
7k views

What is the difference between Heuristic-based and Behaviour-based virus scanning?

I'm struggling to see the difference as all papers and notes I've read seem to contradict each other. Can someone please explain to me the difference between heuristic and behaviour based virus ...
2
votes
1answer
164 views

Second hand pc safety tips?

Edit: Thanks for all the help, found a BIOS version and updated them all and gutman'd them all. everything is working well and nothing has died so all my paranoia paid off... or there was nothing ...
2
votes
2answers
2k views

How to defend against a virus that hides the payload by encrypting it?

Recently I've started to learn more about the way antivirus and other anti malware products work, and I realized that most of them mainly use 3 different techniques to detect and stop malware: ...
0
votes
1answer
1k views

Man-in-the-middle attack detected by antivirus, how is that possible?

I have tried to perform a mitm attack on one of my pc's which has Eset antivirus installed. I tried to intercept http/https data by forwarding port 80 & 443 with iptables. Then I used arpspoof ...
2
votes
1answer
370 views

is it possible to scan an umounted pendrive partition with clamav on linux?

so, I dont want other applications to have a chance to try to read any files on the pendrive partition. from here, after testing (without mounting any partition), I see I can extract the MBR for ...
2
votes
1answer
2k views

File signature vs Virus signature

I have thought of creating simple anti-virus. I have read some article and they said that the there is a two way of detection. The virus dictionary signature searching is the one method. So I have ...
0
votes
2answers
679 views

file transfer/sharing/hosting services: Are the antivirus natively incorporated?

A few days ago, there were a few files that may have been plagued by a virus that I asked my colleague to send me through a file sharing service (here, WeTransfer). The files were sent correctly and ...
3
votes
2answers
2k views

QiHoo 360's antivirus false positive rate

My colleagues recently bought an antivirus,the QiHoo 360 antivirus, for the chinese plant and implemented it on servers and laptops. The anti-virus showed some of the developments files we've been ...
1
vote
2answers
2k views

Can an antivirus delete files inside an archive?

If an Antivirus (ex:ESET) detects a virus inside an archive (ex: .RAR) will it automatically delete the infected file? Or would I need to delete the whole archive? (assuming the archive is not ...
1
vote
0answers
558 views

Is "Virus Scanner Plus" a legitimate product?

I have "Virus Scanner Plus" (ostensibly) by Bitdefender installed on my Mac from the App Store (and have had for a few years). But, although the app was recently updated in the App Store, it is not ...
1
vote
2answers
519 views

How do I configure Symantec AV to permit pentesting tools without compromising my organization's network and my host computer?

When performing penetration testing for work, I often have to turn off Symantec Endpoint Protection in order to use certain payloads with Burp Suite and I recently had to do this for something as ...
4
votes
1answer
131 views

What are the proper steps for "quarantining" Malware?

I am writing a powershell script that effectively quarantines a computer after malware is detected on the system. So far I have the script disconnecting the ethernet adapters to ensure the device can'...
3
votes
1answer
1k views

Sophos AV doesn't block standard ClamAV test files

The company where I work recently got through a security audit. Everything seems to be solid except our Sophos Cloud Security AV. I was asked to try and download some of these ClamAV test files on ...
159
votes
14answers
18k views

What is the safest way to deal with loads of incoming PDF files, some of which could potentially be malicious?

As an investigative journalist I receive each day dozens of messages, many of which contain PDF documents. But I'm worried about some of the potentially malicious consequences of blindly opening them ...
4
votes
2answers
393 views

How can antivirus companies analyze the large amount of samples that they receive?

Antivirus companies collect samples from their products or the users can directly submit the samples through forms on their websites. The number of collected samples is very big. How can a group of ...
2
votes
3answers
189 views

prevent virus code modifying commonly run executable files?

I have recently been looking into 'cyber essentials questionnaire' and I came across the question "Other than anti-virus software, are access control measures in place to prevent virus code modifying ...
11
votes
3answers
7k views

Should antivirus HTTPS scanning be left on? Is it secure?

Some antivirus software MitMs, or through other methods, HTTPS connections in order to scan for malware, for example, Avast, and maybe other vendors too. Is the method they (let's say Avast as an ...
0
votes
1answer
81 views

Can programs replicate hidden versions of themselves? [closed]

I'm currently studying malware techniques of replication to gather information for coding an antivirus. Could a malware (if run) create a duplicate of itself in the startup directory with the hidden ...
4
votes
2answers
4k views

Meterpreter HTTPS detected by IPS

I am busy with security testing on a clients network and was asked to show how "easy" AV evasion is. I created a nice powershell reverse HTTPS file through veil-evasion, which is not detected by the ...
1
vote
0answers
542 views

Is it possible to obfuscate binaries with UPX or similar software?

Warez scene groups often compress their binary executables using UPX or similar software. I've heard somewhere that they do this to obscure the algorithms they use from other groups, but I find this ...
5
votes
1answer
237 views

Is it wise to show the "e-mail has been scanned by XYZ antivirus" in e-mails footer? [closed]

It is a common practice to append the "antivirus footers" to emails, e.g.: Scanned by ClamAV or This email has been scanned by the XYZ Email Security service There is many opinions about it, ...
-1
votes
1answer
733 views

Reason Trend Micro 11 update disrupts git, svn and other services?

The November 11 2016 Trend Micro AV software client update to version 11 apparently broke a lot of stuff. Personally I lost the use of git and according to our IT department a lot of other stuff broke,...
0
votes
1answer
493 views

Microsoft Windows Defender keeps detecting BrowserModifier:Win32/SupTab!blnk

On my computer, Windows Defender keeps detecting this: After I click Clean system or Apply Actions. It just comes back again after a few seconds. I am a software developer myself, and I study ...
1
vote
2answers
145 views

Given good security practices and an up to date system, does an antivirus add to security? [duplicate]

I use Windows 10, do all the updates in time, browse only with Microsoft Edge and Google Chrome, and I think that I have all the common good security practices meant to avoid exposing my system to ...
1
vote
3answers
2k views

How Big are Antivirus Definition Databases?

Accoording to HowToGeek: Your antivirus software relies on virus definitions to detect malware. That’s why it automatically downloads new, updated definition files – once a day or even more often. ...
1
vote
0answers
109 views

How do the antivirus safe browsers work?

Let's refer to safe browsers like Avast Safe Zone, Bitdefender Safe Pay and all those browsing tools -generally included into the paid antivirus suites- which are supposed to protect users data from ...
19
votes
4answers
14k views

Do Linux systems need antivirus against ransomware? [closed]

I use Linux to store private data and backups for my team because it is said that Linux is itself very secure from malware and doesn't need antivirus. But now as ransomware is spreading and has ...
0
votes
1answer
420 views

What are examples of code found in Polymorphic anti-virus?

Viruses used to have specific "signatures" which anti-virus software used to identify them. However, in today's world, viruses can change their code (while maintaining purpose) at specific points in ...
-1
votes
1answer
329 views

Justification for an Enterprise Antivirus software and a Firewall [closed]

Am doing a project on the need to have both an Antivirus apps and Firewall in an Enterprise environment. Can someone kindly provide some justifications for having both instead of one one. Thank you.
0
votes
4answers
265 views

Are there tools that can prompt the user every time an executable uses system functions?

As a programmer I don't use anti-virus programs for a simple reason: I found that viruses are only detected once the executable or a part thereof has been explicitly blacklisted by the anti-virus ...
1
vote
2answers
571 views

Virus checking and cleaning an external hdd

Is it safe to scan and clean an external hdd of malware/virus on an otherwise clean system ie my system!? Does the antivirus software on my machine do it's work externally? ie if a virus is detected ...
1
vote
1answer
346 views

Why does McAfee think Stack Exchange is malicious?

I was surfing Stack Exchange today on my phone and clicked on a question that linked to skeptics.stackexchange.com and was promptly greeted with McAfee telling me the site is malicious. I've vistited ...
2
votes
2answers
226 views

Antivirus detection of where exe is compiled

I've been experimenting with how antivirus detect trojan signatures to get my head around a couple things for CEH certification. This has mostly involved playing with variations of windows EXEs. I'm ...
0
votes
1answer
80 views

How to know if locally installed programs (like Re Image) are malware

Not sure where to ask this question but figured I'd ask it here, at least in a generic way. I installed a program called Re Image as I red it helps with system instability problems. However, I then ...
1
vote
2answers
2k views

Why would a bat file that just starts a program be considered a virus?

My friend's computer was having a lot of viruses so he wanted me to download an operating system for him. So he gave me a flash memory. When I opened the flash my antivirus (Kaspersky Total Security) ...
2
votes
1answer
2k views

Antivirus being disabled by unknown source or application

I am running a laptop with Windows 10 and free avast antivirus installed for protection. I keep the antivirus up to date all the time. A couple of months ago I noticed that sometimes my antivirus is ...
3
votes
3answers
2k views

SELinux vs. Antivirus

I am working with an enterprise network with sensitive data nad am not sure if I should use SELinux or an Antivirus for the Servers, POS Terminals, and Desktop Machines. I need to know what the ...
1
vote
2answers
781 views

Computer virus names and their aliases

At this VirusTotal report we have detected a set of viruses with different names. Every antivirus system provides its own virus names. Is it possible in some way to get a common virus name based on ...
0
votes
1answer
251 views

Is there antivirus software for iphone model 6s?

I suspect malware (aka a virus) on my iPhone model 6s. I could be totally wrong. But, I hit a wall when I asked Apple, they said There is no such software The manager said he refused to research ...
2
votes
2answers
466 views

Do thin clients need Antivirus protection

I recently took over managing the IT needs for a small healthcare agency with locations in 3 different cities. They have a widespread use of thin clients, as the clinical application most often used ...
178
votes
11answers
32k views

Help! My home PC has been infected by a virus! What do I do now?

This is an attempt to ask a canonical question as discussed in this old meta post. The goal is to create something helpful that can be used as a duplicate when non experts ask about virus infections. ...
11
votes
2answers
2k views

What are the risks of antivirus exclusions for virtual machines’ files?

For performance reasons, I would like to whitelist the following files from an AV protection: .vmdk (VMWare virtual disk file); .lck (VMWare lock file for disk consistency, created in the same ...
7
votes
2answers
997 views

How do anti-exploit programs work?

There are plenty of answers available which detail how antivirus and anti-malware programs work, including details on signatures, heuristics, sandboxing, etc. However, there seem to be relatively few ...

1
5 6
7
8 9
14