Questions tagged [virus-removal]
The process of removing a virus or malware from a system.
92 questions
2
votes
2
answers
174
views
How can I safely restore files from an infected computer?
This was asked before, however was 6 years ago and things change.
I have a relative's computer, that got owned by an AnyDesk "delete your files" ransomware attack.
I'm pretty sure they just ...
- 121
1
vote
0
answers
100
views
Streamer Virus on offline network [closed]
I have an offline network with 200 users. and routers, switches, 4 esxi servers and 1 netapp rack.
After about a year, my team found out that we have a virus in the network called streamer.exe that ...
- 11
1
vote
1
answer
130
views
How can we confirm with certanty a USB or Harddrive is not infected after reformatting?
Running the following code on a linux machine returns the partition tables and partial config of the hard-drive and USB devices.
fdisk -l
returns
Disk /dev/nvme0n1: 238.47 GiB, 256060514304 bytes, ...
- 11
0
votes
1
answer
410
views
Do viruses survive in other drive and than re infect after resetting the PC?
Backstory:
I got infected while installing some shady software and at that time I kept Windows Defender off, (I have very much faith on my shady website) by turning its features off. But when I ...
0
votes
1
answer
713
views
I think I have a cryptomining virus, vmmem [closed]
My computer (Win10) was running slow and hot, and I noticed that a process called vmmem was using 85-99% of my CPU. I became concerned when I tried to shut down the process from Task Manager, and it ...
- 1
0
votes
0
answers
496
views
Does malware use Oracle RDBMS Kernel Executable (oracle.exe) to steal data?
I'm worried that my computer may have been infected by a virus. My Windows Virus Scan says that nothing came up, and a Chrome malware scan also turned up nothing. However, a process called Oracle ...
- 115
1
vote
1
answer
232
views
Are most viruses detected eventually?
My question is being asked in the case that I am currently infected. Many viruses are zero-day viruses, and in addition, I only occasionally install MalwareBytes, which seems to be the agreed-upon all ...
- 11
1
vote
1
answer
125
views
New York Times article about FBI secretly removing malware from U.S. corporate servers - would this indicate they have a government backdoor?
New York times just ran an article titled "U.S. Says It Secretly Removed Malware Worldwide, Pre-empting Russian Cyberattacks" that stated
The United States said on Wednesday that it had ...
- 135
1
vote
3
answers
667
views
My computer was probably infected by a virus from a professor [duplicate]
I got a mail from my professor this morning with a request.zip file attached and a password in the mail to open it. Since the mail was from my professor and he already did send me zip attachments I ...
- 11
-1
votes
1
answer
182
views
Can Android be hacked without ANY symptoms [duplicate]
The full story goes here
In short, I surfed darkweb on android(updated android 10, now 11) carelessly and ignored some hijack warnings(2 of them) by Tor (warnings came in the form of a purple webpage ...
- 1
0
votes
0
answers
52
views
Surfed Darkweb carelessly [duplicate]
A while ago, I installed Tor app on my android (fully updated and Android 10) and with a free Vpn tried to open some sites listed on several blogs (like "best dark sites in 2020" or "...
- 1
0
votes
0
answers
482
views
Is Chrome Browser/ Computer compromised by KMSPico?
I recently installed a new windows key for my friend.
He was using a hack program previously, known as Auto KMS. So after new keys installation, I used Windows defender to remove AutoKMS program. The ...
- 101
0
votes
0
answers
52
views
How to decrypt encrypted data from .repl ransomware on Windows? [duplicate]
My PC is infected with some sort of ransomware.
I managed to take out the root processes of the virus (which encrypt and change all document, images and video files to *.repl files) but recovering the ...
- 1
2
votes
1
answer
2k
views
Screenshots and steganography, can malicious code in image be copied?
If you have an image that has malicious code written into it using steganography would a screenshot of that image have functional malicious code as well? Or does the recapture transform the image data ...
- 23
1
vote
1
answer
263
views
Formatting potentially infected USB stick before plugging it into trusted devices
As stated in the title - is formatting my own USB stick on a separate computer with live-Ubuntu enough to prevent malware infection?
I work as computer technician and sometimes my pendrives must be ...
- 45
20
votes
2
answers
5k
views
How to remove quarantined virus securely?
There is a file found by antivirus program and it was put into the virus' quarantine section (its not a false positive). Now I don't know how to handle this "quarantined" files.
What is the best ...
- 493
1
vote
1
answer
706
views
Would my USB interface be infected if I attached and immediately detached an infected USB device?
Two days ago, someone gave me their pen drive to copy some songs from. As soon as I inserted the drive into my laptop's USB interface, Windows Defender immediately warned me that the drive was ...
- 113
0
votes
0
answers
32
views
How to remove a very stealthy virus? [duplicate]
I have a virus on my laptop preventing me from installing antivirus, or updating windows or even opening task manager.
i tried running a virus scanner from a portable scanners, the virus disappears ...
- 1
0
votes
3
answers
200
views
Is it safe to backup programming projects from a possibly infected computer?
Is is safe to backup programming projects (for example websites that where made using HTML/CSS/JS with the help of some frameworks and libraries (Bootstrap, jQuery, etc.), C# projects made with the ....
- 35
3
votes
1
answer
905
views
Undetected Trojan: what type of Scheduled task is this?
on a computer I received an email with a web link inside that shows the following address:
hxxps://myprimeedu.com/certificato/f0uq1-17relk-aW5mb2NlcmJvbmVhbGx1bWluaW9AcGVjLml0-y8ym71-wowuq-2rpvmx/...
- 31
-1
votes
1
answer
3k
views
Can an ISO file harm my computer without being executed by me?
This is very related to this question:
What damage can a malicious .iso file cause without explicitly executing it?
An ISO file got downloaded to my desktop. I immediatly tried to delete it, but when ...
- 3
0
votes
1
answer
263
views
What is this NAT rule forwarding UDP port 1052?
I just went to have a look through some router settings today and found an unknown new entry in the NAT table, forwarding UDP port 1052 to the same port on a host which runs both Windows 7 and Linux. ...
- 3,045
3
votes
3
answers
4k
views
Should I be worried about old viruses from a hard drive that hasn't been used in the last 13 years?
I recently built a new PC with windows 10 and I was recovering some pictures from an old hard drive that I had in one of my PCs from about 13 - 15 years ago. The hard drive has just been sitting in a ...
- 33
0
votes
0
answers
160
views
.[[email protected]] virus [duplicate]
I have one PC (Windows 7) which is attacked presumably by a ransomware (in spite of having regularly updated antivirus viz Net Protector AV).
What I could see is this --
In MySQL/bin folder, all files ...
- 101
2
votes
1
answer
994
views
How can I recover my exploited android phone? [closed]
I have a Samsung S9 phone that has been exploited by my neighbor, however I am unsure as to how to prove/verify it, how in depth the access is to my phone, or how I can re-secure my phone.
It seems ...
0
votes
2
answers
346
views
Is Kaspersky Total Security a good choice against malware? [closed]
I've been using Kaspersky Total Security for quite some time even though I'm not an Information Security professional, I heard it was considerably efficient. Yesterday, though, I was navigating ...
0
votes
2
answers
314
views
Could my computer have downloaded some sort of virus or malware after clicking this button?
I went to the website: katsokos.com, and was shown this page:
I stupidly clicked on the verification button and was redirected to the chrome store page for some chrome plugin, as well as the website ...
- 101
1
vote
0
answers
267
views
Computer Virus detection decidability proof [closed]
Is there a way to prove that detecting computer virus is decidable, the prove may be theoretical also
1
vote
1
answer
288
views
Android antivirus apps
Is it necessary to have an internet connection to run and properly scan an android device for viruses or malware using an anti-virus app? How an anti-virus app scan an android device for infected ...
- 123
1
vote
1
answer
1k
views
SSD Wipe to remove known & unknown malware [duplicate]
Does anyone know of a method to wipe a HDD that gives a high degree of confidence that any malware present will not persist when the OS is reinstalled? Using tools on Linux and/or Windows?
We have ...
- 11
2
votes
1
answer
189
views
How Do antiviruses decide whether a file is to be quarantined or not?
Situation: Trying to understand how an antivirus works. So when an antivirus finds a file with a hash value matching their database, it reports it as an infected file and would quarantine it.
Problem:...
- 173
0
votes
1
answer
123
views
functioning ( behavioural based ) of an antivirus [closed]
I know how signatures are used to detect malware samples of already known malware and techniques to apply to use.
1.What are some of the different behavioral techniques used by antivirus/anti-malware ...
- 33
-1
votes
1
answer
321
views
I May have a Virus. What Can I Do? [duplicate]
So recently, I was Googling for images so that I can run Cisco router images on GNS3. I know I shouldn't be looking for images and I will now stop.
I came a across a site and I believe it gave me a ...
- 3
1
vote
2
answers
187
views
How to safely reformat? [duplicate]
Spyhunter has found an infection on my computer and I need to reformat, evidently. The main question I have is how can I safely reinstall Windows with all Windows updates safely? I suspect that each ...
- 11
3
votes
4
answers
640
views
How to know if virus alert is false positive?
I received alerts (email & browser injection) from my ISP about a Zbot infection behind my modem.
I ran Microsoft's malicious software removal tool, as well as AVG's Zbot remover on both my ...
- 455
3
votes
0
answers
54
views
Possible EternalBlue Infection, Next Step? [duplicate]
Sorry if I messed up in any manner, e.g. title, details, tags, layout, venue, response plan, etc. I know a little of the stacks and security in general.
Short Version:
I found material on my other ...
- 131
0
votes
1
answer
269
views
How to search for malicious software added after a recent date
I recently gave my laptop to Apple for repair, and they required my admin password. Of course I supplied a temporary password, but they still had access to the admin account.
I trust Apple, but I'm ...
- 103
3
votes
3
answers
1k
views
Problems with Chrome, Skype and Discord - possible MITM attack? [duplicate]
Two days ago everything was working just fine, but then I got this error in Google Chrome:
Your connection is not private. www.youtube.com might attempt to steal your personal information.
At the ...
4
votes
2
answers
426
views
What is the best way to screen potentially compromised USB or flash devices?
I've got some flash devices. It is a bit like playing Russian roulette. The devices are of unknown origin containing information of unknown value. However, the potential value is great enough to be ...
- 126
1
vote
2
answers
248
views
Different virus types of testing on a Windows VM [closed]
I am a masters student in computer science, and I need to do a project with virtual machine (host and guest both are Windows 10). The project is:
Describe and experiment different methods to clean up ...
- 17
0
votes
2
answers
2k
views
Can HDD without OS contain active virus
I bought a Free-dos computer with 128gb SSD and 1 TB HDD some time ago, installed Windows 10 on the SSD. After months of usage by many people, I question the security of the computer, I see sudden cpu,...
- 163
2
votes
1
answer
2k
views
File signature vs Virus signature
I have thought of creating simple anti-virus. I have read some article and they said that the there is a two way of detection.
The virus dictionary signature searching is the one method. So I have ...
- 187
1
vote
0
answers
620
views
What do "Mac Ads Cleaner" and "Mac App Cleaner" do while installed? [closed]
Recently I responded to a suggestion that I "upgrade Flash" on my macOS system only do end up with several applications running, and intruding into my browser and desktop that I did not (mean to) ...
- 333
2
votes
1
answer
305
views
Hosting send virus errors could not get rid of this
I have a wordpress website and hostgator keeps on sending this information →
During a scan of our servers we identified malicious content in
accounts under your control. We have quarantined the ...
- 121
6
votes
1
answer
10k
views
Can you recognize this virus?
Yesterday i noticed a folder with a strange name, it looked like this from the inside:
I was cautions not open any of the files, but i opened the .sql in a text-editor, to realize it's not SQL but ...
- 163
0
votes
1
answer
305
views
Locking down Ubuntu
A competition is coming up at my school for securing computers and my OS for this challenge is Ubuntu. I'm trying to think of things to add to my list of security measures and things to look out for. ...
- 1
-1
votes
1
answer
158
views
Is the Android Application Manager Infallible? [closed]
When the Android Application Manager reports that an app has been uninstalled, or an app does not or no longer appears in the Application Manager list under any category (installed, running, etc.), is ...
- 563
1
vote
1
answer
1k
views
my server got hacked and I only got to find the cronjob command [duplicate]
I installed Clamav and rootkits detectors and they found nothing.
The virus run a few process named modules that eating cpu, my server vendor told me that it is bitcoin miner virus but they didn't ...
- 131
1
vote
2
answers
803
views
Shared hosting is hacked [duplicate]
My shared hosting with GoDaddy was hacked by injecting a PHP file (deade6.php) that is recreated every time I delete it. I also tried to modify the .htaccess but it gets recreated as follows:
<...
- 11
1
vote
0
answers
32
views
How to get rid of youndoo? [duplicate]
Lately my computer was infected with an adware called youndoo , this opens a search page every time I open a browser , tried resetting the browsers and used a malware remover , but didn't work , how ...
- 327