Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
2
votes
1answer
185 views

Can a driver(malware) hide it self from device manager?

For security reasons, I have this question in mind. I am not a security professional, so I want to ask: Let's suppose my computer's firmware is hacked. If I disable the wifi driver on windows, can a ...
0
votes
0answers
96 views

How to determine if a PC is safe after receiving a suspicious email message

I was checking my gmail account spam folder and I noticed an email sent by a known sender. I thought it was flagged as spam by mistake so I opened it. Then I realized the content is the same as ...
0
votes
1answer
84 views

How to remove IGAL ransomware [duplicate]

The IGAL ransomware is a malicious program that encrypts the personal documents found on the victim’s computer with the “.igal” extension, then displays a message which offers to decrypt the data if ...
0
votes
1answer
92 views

How I can read and handle MS Office documents, such as doc/ppt files, securely?

I've heard of too many horror stories of people opening a seemingly innocent docx or pptx file that they've got from a business partner, only to find out that it had embedded malware inside. What ...
1
vote
1answer
77 views

Cannot interpret maldet results

After executing sudo maldet -a / LMD provides the following report: HOST: foo.bar.baz SCAN ID: 210117-2223.1145531 STARTED: Jan 17 2021 22:23:26 +0000 COMPLETED: Jan 18 2021 22:01:12 +0000 ...
0
votes
2answers
137 views

Does malware that comes through outdated apps go away if I uninstall the apps?

I was reading this and this article. The first article itself is about why software updates are extremely important for security, and the second one also mentions the following: "Make sure your ...
0
votes
0answers
54 views

Wordpress reauth attacks? How to prevent

I am running a forward proxy filtering outbound requests for the following in order to catch potentially malicious requests from hacked Wordpress sites: /wp-login.php* /xmlrpc.php* Lately this has ...
1
vote
1answer
160 views

Was there ever any malware found in Debian/Ubuntu packages?

With over 50,000 packages in Debian, it doesn't seem too unlikely that some of them may contain malware. On Ubuntu's side, their review process is apparently rather superficial, aimed at catching some ...
0
votes
1answer
71 views

Can't find cause of malware in Wordpress site - adding html files with redirects [closed]

I'm helping a non-profit and they have had malware on their WordPress site. I installed Sucuri and it quickly finds some strangely named HTML files in the base directory. I removed those files. ...
1
vote
1answer
3k views

How to check for malware before downloading a torrent file?

I wanted to know if there is a way to check if a torrent file has malware or not, before actually downloading it via uTorrent f.e. I only know VirusTotal site. Is this one reliable? Because each time ...
0
votes
1answer
81 views

Connecting Pendrive used by multiple users

Tried looking for it but didn't find solution. So basically every once in a while we are getting from our kindergarten an USB pendrive with photos. I am trying to find a way to safely copy the files ...
2
votes
1answer
142 views

New trend? Recognizable and specific subject in Spam / malware mails

It seems that a new trend has emerged in the past few weeks. While users are (meanwhile) aware that an unexpected mail with subject "Your invoice" or "Your delivery" is suspicious, ...
1
vote
0answers
73 views

.htaccess to stop scripts with image extensions

I use a .htaccess file in my images directory to block scripts from running. I exclude .php .cgi and so on. But some malware is disguised by naming them with an image extension. I did not previously ...
0
votes
2answers
975 views

Is it safe to view a file on Google Drive?

My laptop got infected with a virus. It was "cleaned" by a professional but I am now reluctant to transfer files I had on my laptop to other computers. I have plenty of images, MP4s, Word, ...
1
vote
1answer
144 views

The hidden meaning of the source code of the malware?

I'm studying the source code of malware developed in c++ and I have two questions in the source code below This is probably code that loads malicious dlls into memory. typedef BOOL (WINAPI *...
0
votes
1answer
171 views

What's this port? [closed]

Listing all the ports currently in use on my mac running $ sudo lsof -i -n -P | grep TCP, I see six entries starting with a weird-looking string of "2BUA8C4S2". A web search for that string ...
5
votes
1answer
286 views

Windows group policies to protect against Rubber Ducky attack

I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I've read other threads that say it's hard to protect against, hence ...
2
votes
1answer
360 views

Can malware infect computers via wifi routers and mice? [duplicate]

My computer was hacked, which probably resulted in malware/a virus being installed so I'm using my most recent backup on a separate machine (all macOS). Luckily, I was able to determine the timing of ...
0
votes
1answer
173 views

Malicious payload in media file content

As with anything to do with software, there have been many documented security vulnerabilities that relate to media files. While many of these exploits take advantage of attributes or variables of ...
1
vote
2answers
353 views

Can a .jar file execute malware on macOS without running it?

I've heard java files can pose a significant security risk due to vulnerabilities. Is it possible for these java files to infect a computer with malware if they are never run? In my case, I am ...
4
votes
2answers
171 views

Ensuring that non-executable files are not malicious

Let's say that I have been sent some maliciously-crafted audio files by an attacker that use an unpatched security exploit somewhere in my system to compromise it. How can I reprocess the actual audio ...
0
votes
1answer
112 views

Can just clicking on a malicious link lead to hacking of my device? [duplicate]

I was not sure about it and I got some answers from internet but didn't get the logical reasoning behind it. If I just click on a malicious link it might open a new tab, or it might download something....
0
votes
3answers
2k views

Is my Windows 10 infected with malware?

When i use google chrome occasionally appears about 5 different McAfee's notification (I don't have McAfee installed), one of those: ATTENTION! Your computer is in danger. We detected a virus on your ...
0
votes
3answers
180 views

Does a compromised device always show an alien process running?

If I check the processes that are running in the Task Manager and find that only the usual process run every time I restart my PC, can I assume that my device is not compromised? In other words, does ...
0
votes
2answers
291 views

How can a hacker put malware on someone's PC when all precautions were taken?

If someone buys a brand new PC with NO antivirus program, and:- Never opens ANY emails/attachments Never visits shady/malicious websites Never downloads anything, Never connects an infected ...
3
votes
2answers
168 views

How can I find out if a unwanted file I got on my USB Stick in the university lab is harmful? What do do now?

I'm using Ubuntu, I detected a file called "yveqsh93.exe" after plugging my USB into a heavily used Windows XP machine in one of the labs of my research group at university (Controlling some ...
2
votes
1answer
156 views

Is it possible to get infected when using a smartTV between two computers?

Been given a smart tv that used to be used as display connected to a pc with a HDMI cable, now I'm using it as a display as well, over HDMI too. I was thinking maybe when connected to a network or ...
0
votes
2answers
185 views

How do I know that the ISO image of the Linux distribution I have downloaded does not contain the NSA backdoor?

I have downloaded the ISO image of Kubuntu 20.10 and installed it. I am afraid that the ISO image may have been tainted (for example, by the NSA) to insert a backdoor into it. As I see it, there are ...
0
votes
0answers
136 views

Malware on Mac OS Big Sur and/or Catalina

So I was wondering if I were to be infected with malware would it be visible? For example most malware will want to gain access to system files. Since Catalina Apple introduced some insight into ...
-1
votes
1answer
110 views

Why governments use spywares instead of just redirecting traffic to their own servers by announcing a new path on BGP?

I was reading about The Hacking Team on Wikipedia. It produces "offensive intrusion and surveillance capabilities" and sells it to "to governments, law enforcement agencies". Its ...
0
votes
1answer
136 views

Did a virus like this really ever exist? [closed]

I know that this world is very evil, and that the most unfathomable things go on around the clock, inside and outside of the "computer world". However, I sometimes really wonder if certain ...
0
votes
0answers
85 views

Are any social media sites sanitizing images?

I'm new to steganography. I have some questions about images on social media sites. I saw that Facebook recently patched a vulnerability on Instagram, but I was wondering whether any of the major ...
0
votes
1answer
155 views

FP vs FN for Malware detection

I have been working on Random Forest Classifier to detect .exe files as Malware and benign. According to me False Negative in my model should be low because they are more harmful but in some blogs ...
1
vote
0answers
295 views

How to safely open two large files (.rar and zip) from google drive on mac?

I have two archived files which were shared with me on google drive. Im using a mac. Both are 9GB if I'm remembering correctly. The files are too large for google to scan for viruses, and too large to ...
1
vote
1answer
122 views

Can visiting website infect computer? [duplicate]

I have heard online that simply visiting a website can infect a computer. I had an instance recently where someone I know sent me a link but misspelled it. The misspelled link lead to a malicious ...
0
votes
3answers
225 views

Ransomware/Virus/Malware - modern protection(s)

Just found this on GitHub: https://github.com/gnxbr/Fully-Undetectable-Techniques/tree/main/minizinh0-FUD I can imagine similar ransomware, malware, viruses exist. AV is useless? Is only Behavior ...
1
vote
2answers
185 views

Is it safe to have 2nd SSD with dangerous software? (disk encryption of the first drive turned on)

Currently, I'm using 1 SSD and I think it's safe. I'm thinking about using 2nd SSD for unsafe software (pirated software). Is it possible that the virus on the 2nd drive can reach the 1st drive, ...
1
vote
1answer
139 views

Step by step protocol for complete system wipe (suspecting persistent backdoor)

I have reason to believe that there is a persistent backdoor on my device, one which is not removed after a re installation of the OS. I wanted to know the step by step protocol of system wipe to ...
1
vote
1answer
866 views

Is this script malicious? What does it do? [closed]

I was working with a freelancer from upwork and noticed they added this script titled .default in my config directory. It looks malicious and they were hired to do CSS style changes of elementor: <...
17
votes
5answers
5k views

Can I check the content of a suspicious file directly on the server using an editor, e.g. vim?

in the Wordpress directory I found some suspicious-looking files with random strings in their name e.g. uxs5sxp59f_index.php. Can I safely check their content ? I have a suspicion that the site has ...
1
vote
1answer
136 views

Would VirtualBox sandbox potential viruses from main system?

I am working with several maintainers of Homebrew currently to verify that several programs in the cask library now ship from the developer with trojans. To verify the claims I created a Virtual ...
0
votes
1answer
111 views

Secure MacOS against malware and external threats?

Often I am required to connect to public wifi or open files that others send me. Doing so opens me up to possible credential theft as well as possible viruses or malware. Thus far I have done my best ...
0
votes
1answer
60 views

Potential danger of infection through downloading malware?

Recently I was on Nox Player's website checking out their Android emulator. I did some googling and came to the conclusion that it was bundled with tons of malware and as a result didn't install it. ...
1
vote
1answer
178 views

Is it possible for a self-extracting file to run malware on Linux?

I know that you need to change permissions for a file to run as a script on Linux. Is that enough to prevent any malware from being installed by some self-extracting file? Is there anything that can ...
1
vote
0answers
57 views

Any data on how often trickbot communicates with certain IPs

I notice on various documents involving the Trickbot malware, they all state that trickbot determines the infected host's external IP address by communicating with the following hosts: hxxp://...
2
votes
1answer
123 views

Forcefully revoking any used permissions by apps on Android by (hot reloading firmware)?

There is a recent malware called MalLocker that hijacks and occupies the full screen size by using SYSTEM_ALERT_WINDOW permission. It poses as ransomware by looking as such but doesn't encrypt files. ...
-1
votes
1answer
127 views

How do hackers inject DLL files into specific folder on the host machine remotely?

I read that one way to perform a dll hijacking is to place a malicious dll file under a specific folder. Then, the original dll won't be executed and the malicious one will instead. I understand this ...
1
vote
0answers
55 views

How do hackers gain access using malicious websites? [duplicate]

I read somewhere that entering a malicious website can infect your machine without you noticing it at all. When someone wants to infect other's computers he has to pass two challenges (as I see this). ...
2
votes
0answers
94 views

Aren't these "new" self-programmable gaming mouses a new security threat? [duplicate]

I have recently bought one of the recent "best" USB gaming mouses out there. The thing that is bothering that the marketing material says it contains a self-programmable computer embedded in ...
1
vote
1answer
123 views

Desperate for removing spywares from both iPhone and Mac PC [duplicate]

I hope this is the correct stackexchange website to ask this, if it's not I'm sorry. Some time ago I started giving private lectures to a girl and she told me, a computer engineering student, that ...

1 2 3
4
5
47