Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

31
votes
1answer
10k views

Was Goggle.com actually crazy malware in 2006?

McAfee version: https://www.youtube.com/watch?v=3atmWmWCwlw “Spyware Rubbernecking” WebRoot version: https://www.youtube.com/watch?v=I6D-GSdLtNo “The effects of typosquatting”. This video shows how ...
2
votes
3answers
177 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
1
vote
2answers
81 views

Can an infected system infect a downloaded iso?

is theoretically possible from an infected system infect a just downloaded iso ? For example, I download the ubuntu iso, I check the hash and it results ok, when I burn the iso the system inject the ...
0
votes
0answers
128 views

PHP malware in the style tag [duplicate]

I'm developing my website based on the Dashgum Bootstrap template, wich I found online. I did a debug "echo" on a completely new empty php page and while inspecting the source, this is what I found ...
0
votes
1answer
67 views

I need help finding a list or a reference of DLL's for discovering hijacked programs

I am removing malware from my grandpa's Windows computer using the system internals suite. I suspect he has a Trojan which has been making remote connections and downloading a TON of viruses every day....
8
votes
3answers
245 views

Sealed Room Security - Possibility of writing assembled binary code

Assume the existence of a sealed room, containing a network with a single terminal. You are not allowed to bring in any electronic material into the room. The target machine is running default ...
0
votes
0answers
335 views

CPU Usage at 100% due to explorer.exe with malicious threads.

(Keep in mind I'm not a computer expert so I'm trying my best here.) Hello, recently I've had a problem with my computer causing my CPU Usage to go to 100%. This makes me unable to move/create/rename ...
0
votes
1answer
99 views

Applying regexp for user input validation using JavaScript

As a full-stack developer I am buliding an webapp for tennis club in codeignitor framework. During making html forms on client side and writing scripts for validation of user input. i thought would ...
0
votes
1answer
118 views

Can malware be installed on a mobile phone when the user opens an sms?

Is it possible for an adversary send malware over messages? I mean, when the victim clicks on the message sent by the attacker, a malware should be installed into his phone (in background). The hacker ...
-3
votes
1answer
242 views

Suspicious network activity detected in Wireshark [closed]

I have never noticed something like this in my network before: My IP: 192.168.1.46 It keeps repeating randomly and constantly. At first, I thought I was infected by some type of malware. I ...
1
vote
1answer
151 views

Feasibility of persistent iOS malware which survives factory reset

Generally speaking, when an iOS device is purchased, it will be a couple of security updates behind the latest version of iOS. This means that in many cases, out of the box an iOS device will be ...
23
votes
3answers
7k views

How to check if a Wi-Fi network is safe to connect to?

I always feel scared to connect to hotel, airport Wi-Fi etc. I feel that if the Wi-Fi router is hacked, my personal information can be collected by a hacker. How can I determine if a Wi-Fi network is ...
0
votes
1answer
155 views

Firefox accuses of malware, but virustotal have 0 matches

I sometimes download PDFs on libgen and sometimes Firefox will acuse them of being malware with the advice "this file contains virus or malware" but gives no details. I've run several of these files ...
1
vote
2answers
243 views

How to make a well-known malicious programs undetectable by anti-virus solutions? [closed]

I want to make well-known malicious programs, like Mimikatz and Incognito, undetectable by anti-virus solutions. I have already tried various approaches myself, like packing the binary with UPX or ...
2
votes
1answer
159 views

Detect and remove rootkit from Debian 8.5 (x64)

My Debian 8.5 (x64) server is infected with a rootkit, which I have detected by using a live CD to display the contents of /tmp and /var/tmp. I found out about the infection by seeing high CPU loads ...
2
votes
1answer
183 views

Suspicious redirect in Chrome

I was online and one of the sites randomly redirected to a site called mcafeesecurity.application-center.club. It was talking about how my mcafee has expired (my subscription is current). I scanned ...
7
votes
1answer
325 views

Does malware have to exploit a bug?

Lately, I have been trying to dive into the realms of malware and hacking. I have learned that hackers exploit bugs in programs and malware does similarly, but I was wondering whether malware must ...
4
votes
3answers
831 views

What assembly should I learn? [closed]

I want to learn assembly, but I am not sure what instruction set (if that is correct term?) I should learn? I have prior experience in programming, and I did a degree in Computer Science but ...
4
votes
2answers
147 views

MalwareBytes Quarantine

MalwareBytes has the ability to quarantine or to quote MB: At that time, they were removed from the disk location where they were stored, placed in quarantine, and modified so that they could not ...
1
vote
3answers
1k views

Svchost without name 50%cpu using and can't access to “Service tab”

I have recently downloaded a trash software (even if normally I do not), and just after done an update of windows 10. After this when I was booting my computer my ventirad (I guess) was running faster ...
2
votes
2answers
154 views

Downloaded “DHL” fraud email to Linux, action needed?

Yesterday I ordered a package and today received an email from "DHL". I downloaded an attachment from the email and clicked it. It opened a htm page. (I did not fill out any information.) I now ...
0
votes
1answer
310 views

Check router for DNS changer virus

I want to verify that router was not affected by DNS changer virus. Router provided by local Internet provider, runs custom firmware with web admin which does not contain DNS settings, no telnet/ssh/...
1
vote
1answer
92 views

Operation Prowli Malware Infects Over 40,000 Machines

Seems a new malware infection has been detected called 'Operation Prowli Malware' and around 40,000 machines are infected. Still no CVE data updated on CVE site regarding the relevant vulnerability. ...
1
vote
1answer
61 views

Is it possible to get infected by malware from running a foreign Xcode project?

An entrepreneur hired me to build out his mobile app and passed me the Xcode project files. From what I've read and heard about the development agency that built out his beta they're sketchy to say ...
3
votes
1answer
566 views

How to detect malware in linux

Is there any way to detect rootkit/malware in linux servers? While for windows users the easiest way is to leave it for an antivirus/anti-malware application, but when you have a Linux machine that ...
1
vote
0answers
22 views

How can identify potential malware from the list of sessions established between my PC with devices on the internet [closed]

I wish to know if there are any software tool(s) that allow me see all established sessions from my PC and flag those connections that are potentially malware. I prefer GUI type tool but will also ...
4
votes
1answer
248 views

Somone accessed my desktop right in front of my eyes

I was using my desktop to do some work. I left it and sat on the sofa, the screen went off and after few minutes it went one I freaked out when I saw the mouse moving around on the screen, then it ...
4
votes
1answer
327 views

Why can RunPE Injection bypass Antivirus Software?

I informed myself about RunPe Injection and programmed my own runPE. Right on my first try, I was able to hide a meterpreter payload from my antivirus program (Avira Antivirus). The meterpreter ...
1
vote
1answer
155 views

is it possible to make a process hosted on svchost?

A few days ago my little brother download a malicious file that turned out to be a Monero miner, the weird thing about it is that it runs as a windows service and hosted on svchost (the original one) ...
4
votes
1answer
94 views

Can restarting a router result in its software being updated?

Articles in the past few days have mentioned the FBI recommending folks restarting their routers to avoid “Russian” malware from affecting some 500,000 routers. This made me curious; what could ...
3
votes
3answers
850 views

Malware infection through phone call [duplicate]

Is it possible for someone to infect your phone/computer network with malware through a phone call if the phone is connected to said network as well?
1
vote
1answer
840 views

chrome is launched and tries to open a wierd website

I have this wierd problem that once in a while (I guess mostly when I plug my laptop to adapter) chromium is lauched by itself and loads this wbesite: http://gestyy.com/wPEFwy I can guess that there ...
1
vote
0answers
85 views

Comodo Firewall HIPS (Paranoid Mode) Regedits

Old time lurker and odd poster here with a general question. I think this might fall more in the nature of understanding system processes. I've activated comodo HIPS on paranoid mode to firstly see ...
2
votes
2answers
465 views

Suspicious Push Notification on Android Phone

When I woke up this morning, I saw a Push Notification on my phone from 'Facebook' saying something like 'Funny Video'. Accidentally clicked on it and it opened a tab in Chrome from with a URL of ...
0
votes
0answers
17 views

I get new files and code modifies on website [duplicate]

I need a help! This is very weird malware I get every week even if I delete it and I don't know what to do. I have a virtual web hosting (not VPS). There are more than 10 websites like: /site1.com/...
0
votes
1answer
3k views

Accidently opened a phishing email, is my computer infected by malware?

I was looking through my unread emails when I accidently opened a Paypal phishing one. I thought it was legit because I saw in the preview it was from "Service-Intl@Paypal.com", but I got some doubt ...
0
votes
0answers
121 views

Usync.nexage.com clicked cancel, cleared history, still said something was downloading? [duplicate]

I decided to go on eBay to look at some computers when I noticed a download pop up on my screen. I clicked cancel then after that searched what exactly could be found a thread on here about it ...
0
votes
2answers
5k views

usync.nexage.com MS Edge Exploit?

Related to this question: Is This A Hack/Malware/Breach? Date: Noticed between 5/23-5/24/2018 OS: Windows 10 Applies to: Windows 10 version 1709 for x64-based Systems Browser: Microsoft Edge 41....
0
votes
0answers
3k views

What is “mapuser” download from usync? Malware? [duplicate]

I saw a recent post with the same question but I'm unable to comment on it as it's on hold. When Mom logs into Hotmail a download box appears at the bottom saying mapuser?providerid=,,,(345 ...
0
votes
1answer
92 views

Can malware transfer itself between iPhone and Windows laptop? [duplicate]

I have an iPhone which I suspect was hacked. So, I have restored the iPhone using iTunes on my computer. When connecting my phone to my computer, can any spyware files transfer from the phone to my ...
5
votes
1answer
266 views

Can a bluetooth speaker contain malware?

Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
1
vote
1answer
5k views

Is This A Hack/Malware/Breach? [duplicate]

Browser alerts about a download with a URL: mapuser?providerid={number}&userid={longcapitalstring} ({number} bytes) It gives me the option to save. This looks incredibly suspicious, but it also ...
1
vote
2answers
475 views

Identifying website attack type (Meuhy.php)

We have a few sites hosting on a Media Temple (MT) shared server. This morning, we noticed that some of our website were down. Upon investigation, we realized that they had been compromised. The ...
1
vote
2answers
342 views

How to analyze malware to find out where keylogger sent data?

Recently my antivirus detected some keyloggers that infected my network. I have those malware files and I want to analyze them. How can I do this analysis? It is important to find out details like ...
4
votes
2answers
351 views

How can Linux be secure if it allows for open source contributions from the public?

From my brief understanding of Linux, developers from around the globe submit code to be included into a Linux update. It's then reviewed by security administrators. When approved, it's passed onto ...
1
vote
0answers
66 views

Password reset link was delivered via text not email, how and why? Any insight is appreciated [closed]

I think my smartphone is being hacked into + controlled by a third party, possibly my internet connection as well. Some very odd things have been ongoing for many months. On my phone I hear constant ...
11
votes
3answers
616 views

How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?

This is a thing I used to hear back in the olden days of Windows XP... People were telling me that a computer running on an out-of-date Windows XP system with no antivirus software was getting ...
0
votes
1answer
8k views

What is cloudfront.net AdWare?

Here is some information I research about cloudfront.net AdWare: I've seen several topics talk abou this malware: Cloudfront.net Malware According to this article: How to remove CloudFront.net ...
7
votes
1answer
2k views

What are non-standard ports and protocols [closed]

I am new to the security field and reading about how to check if an application is secure. One of the checks involves finding out if the app uses non-standard security ports and protocols. However, ...
-1
votes
1answer
452 views

Anyone know if this .cmd is harmful [closed]

file.cmd @echo off cd %SystemRoot%\System32 set HUkC= Set HUkC=%HUkC%3Kt Set HUkC=%HUkC%AkR Set HUkC=%HUkC%Vgc Set HUkC=%HUkC%6a0 Set HUkC=%HUkC%5Gz Set HUkC=%HUkC%wD2 Set HUkC=%HUkC%JZE Set HUkC=%...