All Questions
Tagged with virus encryption
17 questions
2
votes
1
answer
313
views
Why does Kaspersky anti-virus not consider this executable as malicious?
I was trying to learn file I/O and related function in C, and thus tried to create a baby-version of a virus. Following is the exact code:
#include <stdio.h>
#include <stdlib.h>
int main(...
- 123
1
vote
1
answer
1k
views
Possible to decode md5 hash of a malicious URL?
Context: I had a virus on my WordPress website server that injected itself into every functions.php file on the server across two different sites. After removing the heavily obfuscated virus code I ...
- 13
67
votes
4
answers
15k
views
Why is so much ransomware breakable?
The site: https://www.nomoreransom.org/ offers many decrypter tools for ransomware.
But why?
It shouldn't be so hard to use the Windows Crypto API (e.g. just google "create AES Key in Windows") to ...
- 711
0
votes
1
answer
165
views
Is it possible to add virus to an encrypted file?
If an attacker has physical access to your computer, could he modify an encrypted file as such that when you move the file to another computer and decrypt it there this new computer which you intended ...
- 183
2
votes
1
answer
1k
views
Why don't anti-viruses detect encrypted viruses in decryption?
Some viruses are encrypted so that the anti-virus can't identify them, but what I don't understand is: why wouldn't the anti-virus detect them, considering they have to decrypt themselves before ...
- 21
-2
votes
2
answers
303
views
is there any solution for wannacry? [duplicate]
"wanna cry" encrypt our data within a minute. So how can they do it that much faster speed on network??
Is my file encrypted by "wanna cry" then any way to decrypt my file without sending bitcoins to ...
-1
votes
3
answers
480
views
Virus using input from victims mic to generate encryption keys [closed]
I am a software engineer from Bucharest and I've created an audio based encryption and authentication application called WaveCrypt. It basically allows users to encrypt (AES) their files with an ...
- 35
211
votes
10
answers
31k
views
What should you do if you catch encryption ransomware mid-operation?
You boot up your computer one day and while using it you notice that your drive is unusually busy. You check the System Monitor and notice that an unknown process is using the CPU and both reading and ...
- 3,127
1
vote
2
answers
2k
views
How can i read the source code of this encoded powershell script from the registry?
I get this line by ProcessExplorer
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile
-windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]...
- 115
9
votes
2
answers
464
views
When do encryption viruses run? [duplicate]
Viruses that encrypt your files, like the recently very common 'Locky', seem to perform a lot of work before they are 'done'.
I wonder, when do these programs run? They must take quite some time, ...
- 201
2
votes
1
answer
593
views
Does CryptoWall needs a internet connection to encrypt my files?
Does CryptoWall 3.0 use some resource on the internet to encrypt my files?
I watched this video on YouTube - in this video a tool is used to sniff network traffic and find information about ...
2
votes
1
answer
1k
views
Decrypt a file by knowing the original content [duplicate]
We had some ransomware get into our system a couple of weeks ago, and it has encrypted a large amount of our files.
I am wondering, is it possible to figure out an encryption key if I know the ...
1
vote
1
answer
1k
views
Prevent CryptoLocker on Server
Are there any ways to prevent files associated with CryptoLocker, to be propagated to a data server, by means of a back up?
We use Cobian as our backup system, and it backs up the user's directory to ...
- 113
16
votes
4
answers
83k
views
CryptoWall 3 - how to prevent and how to decrypt?
My father's computer is now infected with CryptoWall 3, according to the link below.
http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information#CryptoWall
Is there a way to ...
- 263
18
votes
4
answers
18k
views
Can Cryptolocker (Or Other Ransomware) Encrypt Files That Are Already Encrypted?
If you have already encrypted files, are they still vulnerable to being encrypted a second time by a program like Cryptolocker, or would this protect them?
- 199
1
vote
2
answers
609
views
How could an AV detect a virus that has a chance of not decrypting itself?
If I understand this correctly there is a chance the virus may not decrypt itself at all. How could an AV catch this?
In some cases, the decryptor may start with a header whose intent is
not ...
- 10.2k
24
votes
3
answers
8k
views
How does a crypter for bypassing antivirus detection work?
I am talking about crypters used to encrypt files like viruses and keyloggers for the sole purpose of bypassing antivirus detection. How do they work?
- 2,020