Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

2
votes
1answer
181 views

Type of malware on adult sites

What kind of malware is there on random adults site? When I open a video in such a sites there is weird effect of opening another window of browser which is immiedetely closed or opening another tab ...
0
votes
1answer
116 views

security leak in working with hardware write blockers?

If a hard disk drive that contains malware, is connected to a hardware write blocker, that works on the lowest level, can this malware copy itself ,spread on the hardware write blocker or even on the ...
2
votes
0answers
48 views

My server is compromised through apache - help! [duplicate]

As mentioned previously, I cannot physically remove the server from the internet as I do not have physical access. So, very little information in the ticket marked duplicate is relevant. I am going ...
2
votes
1answer
101 views

White screen popped up. All of sudden not able to do anything. Scam or something else?

I have been using this laptop for the last 6 months and never had any issue, but last Friday I was watching a movie and then all of sudden my PC restarted and a white screen (see figure below) showed ...
-1
votes
1answer
77 views

How to stop wordpress attack with bot? [duplicate]

Here are some files that hackers modified. Inside my WordPress installation, I found an unknown folder called ID3 inside of a folder called ID3. three files 1.bots.php this is bots.php code GNU ...
4
votes
2answers
115 views

How to find what files in a zip are malware using Virustotal

I have a malware infected android phone and I am suspicious that some of the binaries in system/bin/ and system/xbin/ are malware so I decided to dump the system and zipped the contents of bin and ...
0
votes
1answer
83 views

Unexplained DNS connections on boot

I was on an Ubuntu VPS today, with a bind9 DNS server (without DNSSEC configured) installed and running. Immediately after booting the machine I ran: netstat -tanp And received this output: Proto ...
6
votes
3answers
245 views

What is the (literally) lightest way to run a second secure system?

My goal is to have two separate systems where one is secure even if the second one is full of malware. My current approach is to have two separate laptops and the only way these two communicate with ...
0
votes
1answer
108 views

Suspicious Redirect to malicious website

While using a 3rd party platform my company is working with (e.g. platform.com) the following issue appeared. I clicked on a button in order to locally download an excel sheet (report) that was ...
7
votes
4answers
486 views

Freaked out by “impossible click” in logs

I was staging an isolated production environment and accessing it's remote PHP script from my local mac on http://example.com/XbAM7Kt7SJj3M8ytJfEQZbwcBLzg0gNWGfyCHL2b0f0 I saw my click in the log as ...
2
votes
3answers
433 views

How to inspect an email attachment without downloading it?

I accidentally opened a PDF email attachment on an Android phone as I was trying to figure out if the email was fraud or a scam. It was an email claiming I booked a flight and the pdf had my e-tickets....
3
votes
1answer
121 views

Information on the specifics of how behavioral antiviruses work?

I'm looking into security software and it seems like the Next Big Thing is behavioral antivirus. I'd like to try possibly making my own rinky-dink "next-gen behavioral AV" so I can gain a better ...
1
vote
3answers
137 views

Extracting features from PE files. Machine learning and malware

Are the features which can be extracted from a PE file (some information from headers, section names, strings, import, export sections etc) enough to use them to train particular machine learning ...
0
votes
2answers
161 views

Malware on read only device/memory

Putting Programs/OS/Files (contain malware) on USB-Stick (USB-stick can do read/write). Let's say this USB stick, after i put Programs/OS/Files on it, is now just theoretically, read-only. I myself ...
1
vote
0answers
53 views

Are there any malware for USB-connected printers

At work, we have a printer/scanner that connects only to USB. As far as I know, no one who uses it has a print server on their computers so I'm not sure it's accessible over the internet. Because most ...
1
vote
3answers
43 views

Read Write Execute on infected thumb drives

There is some debate going on among my peers. With differing opinions regarding risk on infected thumb drive with limiting policies set on it. Question is Can you still get an infection with read ...
2
votes
1answer
145 views

opening infected files on Linux and Raspberry Pi

Considering Linux's reputation for being somewhat immune to infections, and the fact that most malware are written with Windows as a target, is it safe to open possibly infected files on a Linux ...
0
votes
1answer
284 views

Can I get malicious malware in my computer or any kinds of virus by registering through Google/Facebook to a specifc site?

Lately, there is a start up company in Israel called Initiative Q and currently it gives out coins (that are similar to bitcoin but they don't run on Blockchain technology) in order to advertise their ...
0
votes
0answers
25 views

How to remove javascript malware in wordpress site? [duplicate]

I created a website in wordpress and suddenly realized malware in my site after google ads stopped and warned me. Below are the malwares found by sucuri sitecheck. <script type="text/javascript" ...
4
votes
1answer
173 views

Windows: Who is this randomname person that authored *my* LibreOffice document?

A friend of mine for which I manage the computer has presented me a problem. How is it possible that Windows shows a random name in field "Authors" for a given document ? Here is a bit of context: ...
2
votes
2answers
335 views

Did I install malware/virus?

I bought a laser plotter, and the seller provided me with software to control it. It's called EleksCam. The provided package from the seller (from aliexpress) consisted of assembly instructions and ...
0
votes
0answers
37 views

Naming rules for newly detected malware samples using known malware components?

I came across a malicious executable that was dropped by a malicious script. The executable (let's call it malfile.exe) employs NanoCore, which is a modular RAT made up of DLL plugins written in .NET. ...
2
votes
3answers
144 views

Is malware on an air gapped computer a requirement to communicate over side-channels?

Is it a requirement to infect the air-gapped pc with malware at first to get all needed functions for a communication path between air gapped pc and attacker pc? For example: Stuxnet, first was the ...
1
vote
2answers
810 views

How can I sandbox a Wine application on Linux?

I would like to run Microsoft Office programs such as Word but do not trust them, nor should anyone. Without running a virtual machine, is there a good way to sandbox a windows application to run on ...
2
votes
2answers
215 views

How to act on company-wide malware infestation

A colleague left and I have been entrusted with the security of the company. Checking an initial status I found that the machines are infested with viruses and there are multiple port scans and brute ...
0
votes
0answers
31 views

Drupal Site Compromised [duplicate]

My personal website Drupal compromised. I replaced all Drupal core modules. I scanned all malicious php scripts in sites folder, found some shells and removed. Now when i hosted in wamp there are ...
-2
votes
1answer
65 views

Getting a M2IzYzlm.exe in task manager [duplicate]

Getting a M2IzYzlm.exe in task manager, It pops up after a certain interval of time and switches off my wifi, when I right clicked and tried to locate it, it shows a folder with a weird name inside ...
1
vote
2answers
223 views

Should I continue using this (potentially dangerous) website?

As a part of my project I had to scrape some motivational pictures, so I considered using the gallery section of the website, "Quotes Cover" - "https://quotescover.com/category/quotes-gallery". ...
0
votes
2answers
366 views

Clicking web page taking me to adware/malware!

Recently I have observed strange behaviour. At certain times, on certain web pages, if I click anywhere in the page a tab/popup opens with ads. First I thought some Chrome extension might be doing it....
0
votes
2answers
247 views

Malicious code found - translation please? [duplicate]

An unfriendly visitor left some code on my website. Unfortunately, the coding makes it hard to understand what he wants (probably full control over my server). Any help in deciphering the actual ...
0
votes
0answers
50 views

Are there compromised CAC readers for sale?

If a DoD employee needed to purchase a CAC reader for home use and they purchased one from Amazon. Is it possible the reader could contain malware, or in someway capture you pin or other private data?
0
votes
1answer
114 views

Apple iPhone Security

How difficult it would be to install an application that could record users keystrokes on an Apple device, for example, an iPhone X, and send it online without the knowledge of the user.
0
votes
1answer
47 views

How can documents held in cloud storage be safeguarded against malware?

The place where I work stores company documents in the cloud. I just want to know whether malware can still access and conduct their malicious activity against these cloud-based documents ? Staff ...
0
votes
1answer
89 views

What reasonable steps can I take to secure a used computer against malware or hardware modification?

I’ve purchased a used laptop that should be arriving soon, and I’m wondering what best practices I can follow to make sure I wipe clean all the likely places any malware could be hiding. I assume ...
-1
votes
1answer
130 views

Malware Testing on a Virtual Box

I would like to test some malware on a virtual box but I can not seem to figure out a safe way to get the malware on the virtual machine. I was thinking maybe I could download it while I am on the ...
1
vote
0answers
64 views

How to get malware campaign runners to use my mail honeypot?

I have a working mail honeypot but have yet to receive any malware. I've already tried submitting my domain to several unsubscribe forms, but it does not seem to have worked. Any suggestions would be ...
0
votes
1answer
63 views

Need to infect a computer for testing - how do? [duplicate]

I'm trying to infect a laptop with malware for testing purposes and I just can't seem to do it. I've been searching for .exes that will just RUN and I can't find anything straight forward. Looking at ...
0
votes
1answer
109 views

can malware operate on the login screen of windows 10? [duplicate]

Can malware record your keystrokes on the login screen of Windows 10? Or only after the login screen? I ask this because sometimes I enter my credential of another distro by mistake.
1
vote
2answers
543 views

Can infection effect a phone through it's wireless hotspot, also the usb tethering

If I made a wireless hotspot from my phone and had computers infected with malware connect and use my wireless connection of the phone can any malware from the pc get into the phone? If my phone was ...
-1
votes
1answer
358 views

Obfuscated PHP code found on Wordpress site - has it been compromised? [duplicate]

Firstly - I expect the answer to be yes. But I never dealt with something like this so I would like some advice. A client has recently complained that their website went down. So I started ...
-1
votes
2answers
94 views

Malware question

A site hosting drive-by malware is configured with a domain name very similar to that of a major social networking website. What is the name of this type of attack?
2
votes
2answers
130 views

Is it safe to run a potentially malicious ISO in a VM using VirtualBox? [duplicate]

I want to try out an OS called "Red Star OS". I want to make it a completely isolated VM, no network connectivity etc., just to explore and take a look at it. I found out where to get it from this ...
0
votes
0answers
76 views

How to delete the Volume Boot Record - bootkit

So i want to no how to delete it as bootkits could hide inside it, it's different from the Master boot record. This code is used to remove the mbr and partition table. sudo dd if=/dev/zero of=/dev/...
3
votes
3answers
636 views

How to assure my customer that my software is malware proof?

We are delivering an application which our customers can use on their network cluster. Now, is there any way that we can certify that the software is malware proof and is not going to spread malware ...
0
votes
1answer
122 views

Infect Android device from inside the network without target knowing?

Is it possible to malicious some device in the same network without the user knowing? there some people use malicious apps but the problem is the user have to see the dialog box application ...
1
vote
2answers
87 views

How do so many vulnerable IoT devices stay alive and online?

With attacks like Mirai and similar "script kiddie" threats giving access to so many IoT devices, how do they manage to stay online? Suppose I have a device online which can be accessed (as root) ...
2
votes
3answers
591 views

How to remove MBR Rootkits/bootkits?

How do I remove them from internal hard drives and USB sticks? Can they infect MicroSD cards as well or anything else? DVD? cd? Heard it's possible to do with a live CD via formatting. What are best ...
-1
votes
1answer
235 views

Opening Malware with Live OS safe?

I have movies other files. I would like to be able to open use safely without risk of infecting the host OS. So they would be opened from an external hard drive with the internal hard disk removed. I'...
0
votes
4answers
487 views

How to safely watch pirated movies, open infected files?

I know pirated movies .avi, .mp4 etc can contain a payload to exploit the media player been used to open the movie, or any file pdf office documents. I use Linux but assume that's unsafe. What's a ...
-2
votes
1answer
358 views

how to avoid change file extension from index.html to index.html.bak.bak on a2hosting [duplicate]

My hosting server is getting infected by a malware. It renames my index.html to index.html.bak.bak how can i stop it?? Even after changing all passwords and removed all malicious code, next day again ...