All Questions
37 questions
1
vote
1
answer
155
views
Have I been attacked?
This may be a dumb issue, but I have no other way to find out. At some point I was sent a facebook message from someone with a name of a person I knew, who wrote something along the lines "haha I ...
- 113
-1
votes
1
answer
2k
views
System Process PID 4 Attempt to connect to many risky IPs using local port 137 [closed]
I noticed in our APT solution that many endpoints in my company initiate connection attempts:
Process initiate: system process PID 4
Remote risky IP 185.94.111.1
remote port: random remote ports
...
- 1
19
votes
3
answers
6k
views
How Can I Process Untrusted Data Sources Securely? [closed]
Here is the conundrum: At my current company, we process physical discs from numerous third party sources and extract the data from them to ingest to our own system. While we can generally trust the ...
- 291
0
votes
1
answer
3k
views
How a computer can infect others devices on the same network?
As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
- 768
2
votes
3
answers
3k
views
How to prevent an infected PC from infecting other machines on the same network? [duplicate]
My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
- 768
0
votes
1
answer
2k
views
Double user-agent. Malware?
The place where I work sometime is receiving some alert from the NIPS stating :
[1:30918:2] "MALWARE-CNC User-Agent known malicious user agent - User-Agent User-Agent Mozilla"
The user-agent in the ...
- 35
0
votes
1
answer
494
views
Is my network infected? Suspicious messages and devices slowing down
Recently a family friend has been complaining that he has been getting hacked on his home network and that he has been receiving suspicious messages from the attacker. He says that the attacker has ...
- 11
1
vote
1
answer
369
views
PC Isolation on network
I believe I have my answer but I just want to be sure. Basically I repair computers, most of unknown origins. Of course some could have viruses and such so I was wondering what the most efficient way ...
- 13
-1
votes
2
answers
2k
views
How to handle the virus on my router?
I believe my router is infected with a virus. If it is, it has been infected for a large period of time (perhaps a year or more). Though, I only started to consider it being a virus around a week ago.
...
- 13
4
votes
3
answers
14k
views
Malware infection through phone call [duplicate]
Is it possible for someone to infect your phone/computer network with malware through a phone call if the phone is connected to said network as well?
- 41
9
votes
2
answers
14k
views
Why is my Windows desktop using a DNS Server on localhost?
I recently inherited a corporate network and one of the devices kept having errors connecting to mapped network drives with errors pertaining to the server time being different than the computer's ...
- 2,381
2
votes
3
answers
219
views
Is it safer to download a file from the internet and open it versus opening a DVD?
Recently I was in the hospital and I brought the results of all test that were done by doctors with me on a DVD to avoid printing 100 pages. I wanted the doctor in the hospital to see it, but she ...
- 171
1
vote
2
answers
966
views
Outgoing traffic block - Best policy
I'm concerned that in my network some background applications / virus can use my internet connection as malicious backdoor, and then I'm in trouble (i.e. authorities can think that one of my pc has ...
1
vote
0
answers
127
views
How can I diagnose what happened after a system was exposed to infection?
A system was connected to an already infected (or not secure) network and was used for few hours for normal use before the infection or hacking was detected. What things or steps should be taken to ...
- 1,375
2
votes
0
answers
89
views
Linux machine continuously transferring data over the network to random servers in china and across the globe [duplicate]
I have been using Linux for about 5 years now but I am not very skilled with the commands to monitor and figure out internal issues.
I recently was having trouble with the Internet. My roommates were ...
- 29
2
votes
3
answers
407
views
Detect trojan/keylogger/virus on a businees network
On a business computer network with around 50 computers, there is a computer infected.
We need to find that and remove it.
I have been running the software below in the suspicious computers, but ...
4
votes
4
answers
3k
views
How Likely Is It For A Virus To Spread From A Linux VM To The Windows Host
I'm currently running Windows 10, and I plan to use a Linux distro to run in a VM (Virtual Box). I know Linux is one of the most secure operating systems there is and I'm curious as to how likely it ...
- 43
3
votes
3
answers
15k
views
Most secure way to isolate computer on network
I handle personal client information. Stuff that shouldn't get lost.
Because of this, I have had to be careful not to download or install anything that is in any way uncertain. One data stealing virus ...
- 157
-2
votes
1
answer
378
views
Stuxnet - The background functions [closed]
Stuxnet was a clever worm that aimed to malfunction programmable logic controllers on nuclear networks (Iran was the most affected). Nuclear networks were private networks, not supported on Internet ...
- 27
4
votes
2
answers
793
views
Possible to detect an/or shut off CryptoLocker by limiting total network bytes transferred?
Since a virus infected PC has to download (encrypt) reupload the entire file (to a file server), and repeat the process for every network drive, is is possible to detect this unusually high bandwidth ...
- 51.1k
0
votes
1
answer
454
views
My computer hacked? tcpdump show a connection to an ALLOCATED UNSPECIFIED ip address
13:06:05.345111 IP 192.168.1.101.36218 > 157.55.130.174.40033: Flags [.], ack 162, win 237, options [nop,nop,TS val 688796 ecr 596714815], length 0
This IP address is Allocated Unspecified on ripe....
- 31
4
votes
0
answers
45
views
Removing malware which is creating temp file and modifying network traffic [duplicate]
I am on OSX 10.9.2, please note I have included several URLs in my post, this is not spam this is due to the nature of the malware.
I have just discovered I have malware on my computer after noticing ...
- 141
2
votes
3
answers
6k
views
How a trojan allows attacker to connect to remote computer behind a router
According to this article on Wikipedia, a trojan horse can allow a remote connection by opening a random port if it is able to bypass the firewall. I'm not much of an expert of routers and Network ...
- 23
3
votes
3
answers
1k
views
How to get rid of an Ad bot?
The issue started due to setting up a proxy server on a PC connected to my network. I then realized that all of my devices that connected to the network, including PCs and phones, are all infected by ...
- 203
27
votes
4
answers
12k
views
Are popular porn sites more likely to be infected with malware?
I'm trying to help my friend understand this because he believes that since a site is very popular, that it's less likely to infect its viewers because of its security! Is a popular site less likely ...
- 271
1
vote
1
answer
2k
views
Computer worms, propagation and exploiting vulnerabilities
I am doing research on computer worms. I have been through several sites and a few caught my attention. I have learned that worms propagate through email, there are types such as XSS worm and most of ...
- 125
2
votes
3
answers
670
views
Malware stole an executable file on my computer? Seems unlikely
If you don't want to read all of the details, skip to the bottom; I'll make a summary.
I created a computer program as a proof of concept (I threw it together in 12 hours, so I wrote it in Visual ...
- 235
-13
votes
1
answer
907
views
Viable way to ruin a milk corporation? [closed]
Hack into their system and change the "Sell by" date so that it is immediately bad. How long do you think until they notice, if you pull it off?
3
votes
2
answers
18k
views
How do worms spread over LAN? [duplicate]
I've been researching LAN recently, and I came across a post talking about viruses spreading over LAN, and I was wondering, how is this possible? Would it not be a huge security issue to allow files ...
- 243
2
votes
2
answers
709
views
Using a virtual machine as a buffer between USB media and OS
I was directed here from the Unix & Linux site. I've gone through some of the related questions, but they seem to be more concerned about whether a guest OS can access the host OS in someway. ...
- 121
6
votes
3
answers
3k
views
Is it possible to catch a virus on my LAN without clicking on anything?
My unpatched PC running Windows is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
- 185
2
votes
2
answers
2k
views
keylogger detection by listening network
It is known that malware often uses keyloggers. Also some viruses aren't detected by antiviruses, therefore some viruses, especially APTs could stay in a system for so long without any detection. What ...
- 366
6
votes
2
answers
418
views
How serious is a local virus in terms of network security
My colleague got a notification on his machine of a possible virus (through the virus scanner that is installed by default on all machines). He called up the tech department, and they simply told him ...
- 894
7
votes
4
answers
9k
views
How to detect a virus in a network card?
How can I know that a network card in a server was infected by a virus or not? Are there any methods to check it?
- 883
2
votes
2
answers
30k
views
What are these ip adresses my computer is connected and how do I block them if they are malicious? [closed]
When I execute a netstat command i see several ip-adresses that have connection to my pc and I don't what they are for. These are the ip's.
TCP 192.168.1.20:1042 fa-in-f125:5222 ...
- 121
12
votes
4
answers
153k
views
Is Teredo in my router a back door?
I use the school computer, which I bought from school, administered by the IT-department. I opened a port to my computer when I stumbled upon this:
It points to my computer IP. (I have a static IP ...
- 411
7
votes
2
answers
521
views
What implications does IPv6 have for internet worms and script kiddies?
Though IPv6 is not here yet it one day we will all lose our familiar IPv4 addresses and be communicating over the internet solely with IPv6 addresses.
What interests me is the implications this has ...
- 2,782