Questions tagged [virus]

A computer virus is a program or piece of code that tends to be malicious and is loaded onto your computer without your knowledge and runs against your wishes.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Is there any anti-virus that only uses behaviour-based malware detection? [duplicate]

I would like to know any antivirus software that uses strictly only a behaviour-based malware detection technique as the aim of my research is to compare behavioural-based and signature-based malware ...
-1
votes
0answers
51 views

Is there any anti-virus that only uses signature-based malware detection? [on hold]

I would like to know any antivirus software that uses strictly only a signature-based malware detection technique as the aim of my research is to compare behavioural-based and signature-based malware ...
-2
votes
1answer
90 views

How can I check for a virus and malware on a USB drive using Ubuntu? [on hold]

If I plug in a USB drive in to an Ubuntu (18) machine, is it possible to get a virus? How can I see if a (Windows, Mac or other) virus is on it? How can I format it to remove any virus?
4
votes
0answers
37 views

What is the most efficient approach to automate testing a malware sample on many different AVs without using online services? [closed]

So let's say you want to automate changing parts of malware and testing it on many different AVs, and you want all this process to be automated, i believe people who gave the AVLeak talk in black hat ...
0
votes
3answers
90 views

Is it safe to backup programming projects from a possibly infected computer?

Is is safe to backup programming projects (for example websites that where made using HTML/CSS/JS with the help of some frameworks and libraries (Bootstrap, jQuery, etc.), C# projects made with the ....
0
votes
1answer
95 views

How do AVs scan the file in websites that claim they don't send the files to AVs like Nodistribute.com? [closed]

So for example one of the famous alternatives to Virustotal aka Nodistribute.com claims that it doesn't send the file to AVs, but if it doesn't, then how can they scan it? just by checking the hash? ...
1
vote
1answer
131 views

Folders with .js files that I didnt create are in my pictures directory windows 10, virus?

About a month ago, two folders appeared in my /pictures directory named: Ready To Glare 🔪 (@ReadytoglareYT) _ Twitter_files and Lawrence's stream mom _ funhaus_files . Inside the folders are .js....
1
vote
1answer
64 views

What use does verifying a file with a signature downloaded from the same server have? [duplicate]

Now, I understand how PGP signatures work and why they can be useful to check if a file has been manipulated but this has always bugged me, if I download a file from a site/server, and read: "...
1
vote
0answers
22 views

Email Plaintext [migrated]

I'm interested in viewing emails without "opening" them up. In other words, I'd like to view the the "plaintext", or text that an email is composed of - being able to see the html or whatever else ...
19
votes
3answers
5k views

How Can I Process Untrusted Data Sources Securely? [closed]

Here is the conundrum: At my current company, we process physical discs from numerous third party sources and extract the data from them to ingest to our own system. While we can generally trust the ...
-1
votes
1answer
89 views

Can an ISO file harm my computer without being executed by me?

This is very related to this question: What damage can a malicious .iso file cause without explicitly executing it? An ISO file got downloaded to my desktop. I immediatly tried to delete it, but when ...
7
votes
2answers
493 views

How do AV scanners in VirusTotal check if a file is malicious or not and how trustworthy is its report?

So i have seen many times that people provide the virus total report for a file to prove its not a virus but i just checked and when i submit a file its not even uploading it (i checked my bandwidth),...
-1
votes
1answer
216 views

I have been attacked with a ransomeware, with all my files converted into .besub extension [closed]

I have been attacked with a ransom malware, with all my files converted into .besub extension. And the hacker left a note and asking for ransom. Obviously the data is important and I want it back. ...
0
votes
0answers
74 views

Keylogger, Published by Microsoft

Is it possible for a malicious Keylogger to appear as "Published by Microsoft" in the task manager? (I do not mean if windows have a build-in keylogger)
-1
votes
1answer
75 views

How to delete browser malware? [closed]

I've got some malware so now my browser is sending requests to strange sites: Also if I click on any html element in a browser It may redirect me to unwanted pages I've tried to fix this using ...
0
votes
2answers
129 views

I am getting “Your connection is not private” error and it disappears when I use a VPN

I use a Mac (running macOS Sierra). Yesterday I was watching a movie online from some not-so-trustworthy website and when I clicked the pause button, a tab appeared and suddenly disappeared. From ...
0
votes
0answers
58 views

Does psexec exist by default on all Windows 7 machines?

During a review of the registry editor, I found psexec and psloggedon installed upon my personal laptop. A few times, I have also observed my anti-virus restricting communication with a external ...
0
votes
1answer
118 views

What is “JTI/Suspect.131328” from McAfee? [closed]

Using McAfee Endpoint Security 10.6 on Windows 10 it is the second time I got the: Warning. I cannot find anything related to it while Googling around: "JTI/Suspect.131328" The question: is this ...
2
votes
1answer
4k views

CVE-2019-0903 detected by just one anti-virus service

On my Windows 8.1 computer I created an MS Word document containing a couple images I downloaded from the internet, and exported it as PDF. The MS Word version is 14.0.7232.5000, 64 bit. I sent that ...
69
votes
4answers
15k views

Why is so much ransomware breakable?

The site: https://www.nomoreransom.org/ offers many decrypter tools for ransomware. But why? It shouldn't be so hard to use the Windows Crypto API (e.g. just google "create AES Key in Windows") to ...
0
votes
1answer
70 views

Is it possible to add virus to an encrypted file?

If an attacker has physical access to your computer, could he modify an encrypted file as such that when you move the file to another computer and decrypt it there this new computer which you intended ...
7
votes
2answers
171 views

What is the safest and most convenient way to transfer data from my computer to “unknown” USB devices?

I recently attended a friends wedding. As a gift to the couple I filmed lots of things and edited the clips into a montage of the big day. Thankfully they loved it and I have had requests from a ...
0
votes
1answer
74 views

How do AV vendors select malware signatures?

AVs use signatures to identify malware which are often strings of bytes or regular expressions thought to be unique to that malware. Do reverse engineers select these signatures by hand or do they use ...
0
votes
2answers
123 views

What would be a secure way to accept potentially infected files?

If I'm designing a web application that allows people to upload files to scan them for vulnerabilities do I need to worry about the server that accepts the files being infected/corrupted if a ...
1
vote
0answers
169 views

Installed a fresh copy of win10 and i have PowerShell script sending info to https://rip.rblx.dev/c/? [closed]

i saw this topic and found out i have those files as well: What is this PowerShell script sending Discord info to random server? so i installed a fresh copy that i downloaded of win10 pro from ...
0
votes
1answer
282 views

Is there something fishy on Kaspersky Internet Security or I am missing something?

Whenever I turn on my computer, a notification pops up - You need to restart you PC (I have added screenshot). I did, but it keeps coming. So went to notification center and saw which application is ...
0
votes
1answer
146 views

ClamAV detects virus in Modsec Audit logs

I have a Xen VM running Debian Stretch with Apache2 to play around with. I have installed ClamAV and Modsecurity (not doing anything just logging at the moment). I keep getting emails from ClamAV ...
4
votes
2answers
224 views

What are some examples of viruses/exploits with benevolent purposes?

A comment from another user had me thinking. What are some well-known (or perhaps not quite so) examples of in-the-wild "malicious" software that do nothing actually malicious, but instead takes ...
0
votes
1answer
137 views

I was redirected to an infected site, what should I do?

I always avoid suspicious links, but recently, in one of my google searches, I clicked the first link on google (looked just a normal site), but it immediately redirected me to a weird news site (the ...
2
votes
1answer
106 views

Antivirus recall and precision not accuracy [closed]

I am studying antiviruses how antiviruses work at my university. This is just the very basics. He asked in our opinion which we think is better: recall or precision. Why does my professor say he ...
2
votes
1answer
184 views

How can I open a malicious image in whatsapp safely?

I have got an image send by whatsapp on my android tabled, which I only can see when I press the download icon. How can I see the image, without getting a virus when the image is malicious? Are ...
1
vote
2answers
152 views

Zeus v3 - can I detect its existence “manually”?

A firewall in my company was triggered by a DNS query from one of our laptops. Specifically, the exact reason was MALWARE-CNC Win.Trojan.Zeus v3 DGA DNS query detected. Now, I could just follow this ...
94
votes
9answers
21k views

Can a virus destroy the BIOS of a modern computer?

In the late 1990s, a computer virus known as CIH began infecting some computers. Its payload, when triggered, overwrote system information and destroyed the computer's BIOS, essentially bricking ...
3
votes
1answer
157 views

Are there any known viruses/malware that can infect Ubuntu that come from the USB?

I know that most viruses that can infect the OS from having an infected USB inserted into the PC are mostly Windows only, but is there any possibility that there is one that can affect Ubuntu as well?
0
votes
1answer
191 views

Is it safer to use Qubes with Whonix from Virtualbox than directly on the host computer?

I know it isn't advised to run Qubes-Whonix from Virtualbox due to performance issues, but other than that, is it safer? I.e. is it harder or easier to hack/infect Qubes-Whonix running from Virtualbox ...
0
votes
0answers
51 views

Asp.NET project .dll is recognized as Ludicrouz virus

I was just working on this project and suddenly Windows Defender triggered a warning of virus... the source was the project itself. Ran the Avira antivirus and found nothing. Removed the C: drive ...
0
votes
1answer
279 views

How a computer can infect others devices on the same network?

As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
2
votes
3answers
189 views

How to prevent an infected PC from infecting other machines on the same network? [duplicate]

My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
1
vote
4answers
107 views

The safest way to transfer files to an offline test environment

I'm wondering what the best tactic is to transfer dangerous files from an internet connected machine to an offline, separated from the web, virtual machine. Why should I do that? Because I want to ...
0
votes
2answers
111 views

Opened a phising email on school email

Hello I opened this email sent to my school email and I realized it was a phising email. And now my OCD and anxiety are going haywire. Is it possible I got infected? I did not click on any links. I ...
2
votes
0answers
247 views

Eventviewer empty logs with English written in Cyrillic Greek

So a while ago I entered my event viewer on windows 10 and I noticed a bunch of weird entries. They look like they where written in English but with the use of Cyrillic and Greek alphabets. I am ...
-4
votes
1answer
424 views

Is there any virus for wi-fi routers that only slow down internet speed and nothing else?

Theoretically I should get 8 MB/s, but over the last 2 months I have hardly been getting 2.5. My ISP claims, on the phone, that my router has a virus in it from a downloaded file. They seemingly have ...
0
votes
1answer
146 views

Why doesn't WannaCry ask to “make changes to this computer” when you run the exe? [duplicate]

When you click on WannaCry, why doesn't it ask "do you want the following program to make changes to your computer?" I've watched videos of people running wannaCry, and it doesn't. I've also watched ...
0
votes
1answer
73 views

What is this NAT rule forwarding UDP port 1052?

I just went to have a look through some router settings today and found an unknown new entry in the NAT table, forwarding UDP port 1052 to the same port on a host which runs both Windows 7 and Linux. ...
0
votes
2answers
426 views

Cmd shuts down computer immediately after windows boots up and logs into the default account/user [closed]

as the title suggests, after I login to default/main account which has administration privileges, after desktop loads almost instantly CMD opens and shuts down the computer, only way I found to stop ...
0
votes
2answers
73 views

I know where I downloaded a virus, should I report it somewhere [duplicate]

I was installing pytool forge and accidentally downloaded virus (clicked wrong link). Should I report this link somewhere? Are there plans to create global virus police task force? I am sorry, it is ...
0
votes
4answers
117 views

Trend Micro showing security warning on website. Unsure how to resolve it

I have a client with a website that sells a book. When someone clicks a button to purchase the book, a form is supposed to pop up (and does). However, I received a screenshot showing that, when that ...
1
vote
1answer
3k views

PDF UrlMal-inf[Trj] Virus

When I create PDF file from my particular DOCX file, it gets infected with the virus. But if I create a new DOCX file and create PDF from that, it doesn't get infected with the virus. I have tried ...
3
votes
3answers
289 views

Should I be worried about old viruses from a hard drive that hasn't been used in the last 13 years?

I recently built a new PC with windows 10 and I was recovering some pictures from an old hard drive that I had in one of my PCs from about 13 - 15 years ago. The hard drive has just been sitting in a ...
147
votes
20answers
39k views

Has it been mathematically proven that antivirus can't detect all viruses?

What analysis was Bruce Schneier referencing when he wrote: Viruses have no “cure.” It’s been mathematically proven that it is always possible to write a virus that any existing antivirus program ...