Questions tagged [virus]

A computer virus is a program or piece of code that tends to be malicious and is loaded onto your computer without your knowledge and runs against your wishes.

50 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
499 views

What exploit is the October 2017 Facebook messenger video using?

There is currently a Facebook virus going around, where a user will receive a message from a friend directing them to a fake YouTube video. The when the user clicks through the virus is sent to their ...
2
votes
0answers
88 views

Why doesn't Defender get suspicious if a program adds exceptions to the Defender?

One can simply add exceptions to the Windows Defender by running this command in Powershell: Add-MpPreference -ExclusionPath <your_path> Why does Windows Defender not immediately flag programs ...
2
votes
0answers
291 views

Is This a Virus?

i want to ask about a program is it a malware or a program from mozilla? When i turn on my pc it start normally but i see an open program called update.exe and it have a firefox icon on it, when i ...
2
votes
0answers
160 views

What is the typical half-life of a virus/worm on the internet?

I am curious about the typical half-life (i.e., loosely relating to radioactive half-life here), if one has been measured/estimated, for the average virus/worm on the internet. Has anyone done a ...
2
votes
0answers
149 views

Are old Android WebViews a risk to Activesync email, and how do I block old devices?

I'm concerned that old versions of Android may be hacked through unpatched WebViews (in PhoneGap and other apps), exposing Activesync email data, and other sensitive information. To mitigate this, ...
1
vote
2answers
91 views

What are the risks of using an unpatched device connecting to the internet infrequently?

My grandfather is interested in buying a smart tablet. He never had any personal computer or any internet connection. He wants to use his tablet solely to read the newspaper, as they no longer deliver ...
1
vote
0answers
123 views

How can I know if phone is already infected?

Last year, my friend who is learning hacking for nearly 3 years hacked my phone using social engineering by installing some malware in my phone. (After researching on Google, I think it might be a ...
1
vote
1answer
442 views

If a file has previously been scanned by VirusTotal, will the VirusTotal website always indicate this fact?

I recently downloaded a very popular open-source application. Usually, I compile open-source applications myself after reading the source code. But my compiler box was busy with many tasks, so I ...
1
vote
0answers
74 views

Exploitation of Resource Packages in Java

I understand this might be a usual question but I thought it'd be interesting to get people's feedback regardless as this relates to security. In games, in particular I am thinking about Minecraft, ...
1
vote
0answers
344 views

How to safely open two large files (.rar and zip) from google drive on mac?

I have two archived files which were shared with me on google drive. Im using a mac. Both are 9GB if I'm remembering correctly. The files are too large for google to scan for viruses, and too large to ...
1
vote
0answers
171 views

Using other programming languages for malware against EDR?

As an example, one of the most basic malware to inject into a process to get a C2 beacon goes like this: Get Handle of a process -> VirtualAllocEx -> WriteProcessMemory -> CreateRemoteThread ...
1
vote
0answers
167 views

Is the most secure way of viewing an infected pdf file through a cloud pdf reader like xodo using a pdf uploaded to Google Drive?

Is the most secure way of viewing an infected pdf file through a cloud pdf reader like xodo using a pdf uploaded to Google Drive? I have a work laptop and I currently work for a small startup that had ...
1
vote
2answers
356 views

Can opening a blackmail/phishing email on outlook cause issues?

I recently ran some programs on my computer that caused some kind of security breach, I reinstalled windows (after formatting) to fix it. 3 days later I got an email with my old windows password ...
1
vote
0answers
197 views

What are the main attack vectors on USB storage drives on Windows 10?

I am trying to understand what generic risks are there in using my thumb drive to transfer files to some untrusted machine and plugging it back to my Windows device. Specifically I am interested in ...
1
vote
0answers
83 views

How does the Emotet trojan activates its remote copies?

The Emotet trojan is active again and I read a bit about how it propagates. This includes phishing and having users launch all kind of files (exes, fiels with macros, ...) - a typical method. It also ...
1
vote
0answers
79 views

Is this "no machine error" a potential security flag?

I posted this in a help forum in an unobscured version and I want to know if I opened a back door to bad guys. ``` X.x.x.y.y.y.z.z homestead #vagrant 374738jdjfjdjd (homestead-7) 7373636hdhdhd X.x.x....
1
vote
0answers
171 views

Is this link dangerous with source?

I received a suspicious email from a friend of mine with stange name of the form first.last@zs3.szczecin.pl, where first and last are his/her first and last names. But the domain is totally awkward. ...
1
vote
0answers
95 views

How can I diagnose what happened after a system was exposed to infection?

A system was connected to an already infected (or not secure) network and was used for few hours for normal use before the infection or hacking was detected. What things or steps should be taken to ...
1
vote
0answers
349 views

How exactly does the HummingBad Android malware gain root access?

I've read a little bit in the last few days about HummingBad, an Android virus which tries to gain root access. It seems to use the root access to display ads and install apps. Varying estimates put ...
1
vote
0answers
321 views

Avast Sandbox Waking Computer from Sleep in Windows 10. Avast 2016 premium version

I typed in powercfg /lastwake into cmd and it told me an avast sandbox .exe had woken the computer. I've disabled sandbox and it no longer constantly wakes from sleep - within 30 seconds. I scanned it ...
1
vote
0answers
361 views

What vulnerability is this malicious document attempting to exploit

CLARIFICATION: I changed the title as people were interpreting this as a request to help understand the code. I explain what the code is doing below (critiques on this analysis are welcome.) I am ...
0
votes
1answer
61 views

Can two antivirus softwares work on one android phone?

Scenario: You have one antivirus installed on your phone. You suspect that your phone might have malware on it so you do a system scan and your AV doesn't find anything. So you decide to download ...
0
votes
0answers
46 views

What equipment would an attacker need to infect a SIM card?

I'm aware that SIM cards can store malware according to this question but what equipment would be needed to do such an attack? For example, would you need a Computer and a SIM card reader or could it ...
0
votes
1answer
134 views

How common are firmware infections?

Hard drive firmware infections were documented in 2015: The hacking tool, believed to be a product of the NSA, is significant because subverting the firmware gives the attackers God-like control of ...
0
votes
0answers
102 views

Realistically, how likely would an average "nobody" user's machine be infected with a virus that can survive a full-format re-install?

I've been experiencing degraded system performance due to undetermined reasons and plan on adding an M2 SSD drive to my 6 year old laptop and doing a fresh re-install. Being Windows 10, I don't have ...
0
votes
0answers
89 views

Can browser extention be compromised via cookie hijack?

Recently my PC has succumbed to an attack of this form caused by trojan and most propably all my cookies from Firefox were stolen. I concluded that after finding out that someone logged on to my ...
0
votes
0answers
97 views

Zeus Trojan's Source Code

I am not sure if this is the correct platform for this question. The source code of Zeus trojan is available on the internet. It can be found on github as well. I have read somewhere that the purpose ...
0
votes
0answers
81 views

Are there some viruses that write assembly code instead of machine code, and use an external assembler?

Like the question says, I am wondering if there are some viruses that do not write machine code themselves, but instead output assembly code and invoke an external assembler? That sounds like a ...
0
votes
0answers
144 views

Is this SMB attempt malicious or normal Windows behavior?

The red client (10.1.0.82) is attempting to connect to the green server (10.1.0.32) through SMB over NetBios port 139. The connection is initiated from the System process (PID 4) on the red client, ...
0
votes
0answers
91 views

Does DVD+R have an MBR? If it does, can a virus that overwrites the MBR overwrite the MBR on the DVD+R?

Does DVD+R have an MBR? If it does, can a virus that overwrites the MBR overwrite the MBR on the DVD+R? I'm about to run a virus in a virtual machine with the DVD mounted because the virus is on the ...
0
votes
0answers
466 views

How to tell if my browsers are infected by ADROZEK?

MS has exposed ADROZEK: https://www.zdnet.com/article/microsoft-exposes-adrozek-malware-that-hijacks-chrome-edge-and-firefox/ I would like to know if the browsers (Chrome, blue ff) of my Ubuntu 20.04....
0
votes
0answers
154 views

Malware on Mac OS Big Sur and/or Catalina

So I was wondering if I were to be infected with malware would it be visible? For example most malware will want to gain access to system files. Since Catalina Apple introduced some insight into ...
0
votes
0answers
239 views

Does SandBoxie have a virus?

When I try to download SandBoxie in the 64-bit version, at this link: SandBoxie and I analyze it with VirusTotal, it tells me that it's safe, but when I analyze some relative files, called: ...
0
votes
0answers
171 views

Is Chrome Browser/ Computer compromised by KMSPico?

I recently installed a new windows key for my friend. He was using a hack program previously, known as Auto KMS. So after new keys installation, I used Windows defender to remove AutoKMS program. The ...
0
votes
1answer
646 views

Can a Logitech wireless headphone usb receiver be infected?

So I think they call them “dongles”? The usb wireless receiver that’s plugged into your computer? Can they get virus from a computer that has been infected? I imagine it’s no more vulnerable than say ...
0
votes
1answer
225 views

Is it safer to run executable file (not safe, may contain virus) on VBox

I have a host system (Windows 10) with premium antivirus and running a Windows 7 in Virtualbox with no antivirus. I have installed sandboxie and try to run executable files that may contain virus. Is ...
0
votes
0answers
644 views

Android 10 downloaded suspicious files without my permission

This is my first question on this forum so please let me know if I need to clarify anything. My Android 10 Pixel 2 just downloaded 2 files without my permission today, both named something to the ...
0
votes
0answers
160 views

Logged in with a hacker's email address

I have an active account at ebay-kleinanzeigen.de (like Craigslist in the US). Today I got a valid email from them that my email address was changed. On my mac, I opened up my ebay-kleinanzeigen ...
0
votes
0answers
130 views

Keylogger, Published by Microsoft

Is it possible for a malicious Keylogger to appear as "Published by Microsoft" in the task manager? (I do not mean if windows have a build-in keylogger)
0
votes
0answers
105 views

Does psexec exist by default on all Windows 7 machines?

During a review of the registry editor, I found psexec and psloggedon installed upon my personal laptop. A few times, I have also observed my anti-virus restricting communication with a external ...
0
votes
0answers
148 views

Check all components for firmware manipulation?

Is there a way to check most flashable components such as Ethernet card, UEFI, Bluetooth & WiFi card, DVD driver, USB port for firmware integrity? Of course I'm not talking about using software ...
0
votes
1answer
2k views

Virustotal detecting threats in Suricata rule set

Virustotal scans are detecting threats from the Suricata default rule pack located https://rules.emergingthreats.net/open/suricata-4.0/ Is this a false positive? https://www.virustotal.com/#/file/...
0
votes
0answers
142 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
0
votes
0answers
489 views

Can a mac carry viruses that could infect a pc via usb stick?

It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
0
votes
0answers
4k views

Shortcut Virus: All contents of my USB gets transferred into an unnamed hidden folder

Whenever I connect any USB into my PC. All of the contents of my USB gets thrown into a hidden unnamed folder which is getting irritating. I have tried to search online for solutions but none of them ...
0
votes
0answers
184 views

Protection against Bad USB not working for me

Protection against bad USB as described in this thread by user 10008 in the top voted answer is not working on my PC at the moment. I tried it when trying to install Ubuntu from a Live DVD to a USB ...
0
votes
0answers
509 views

How to test backend virus behavior?

I have a website that allows the user to upload files. The front-end (web tier) checks the file extension and first few bytes of the file for the magic number of an acceptable file, but then ...
0
votes
1answer
160 views

What is this NAT rule forwarding UDP port 1052?

I just went to have a look through some router settings today and found an unknown new entry in the NAT table, forwarding UDP port 1052 to the same port on a host which runs both Windows 7 and Linux. ...
-1
votes
2answers
120 views

How to protect against simple web distributed viruses

I work as a data recovery consultant and a surprisingly large number of my clients are individuals that caught a virus from "The Internet". A lot of people would browse dodgy websites, download all ...
-2
votes
1answer
102 views

Infecting files on GitHub

Suppose one uploads (carelessly or purposefully) a file with a malicious payload to their Github account (some pdf document, picture, etc.). Could this payload somehow be executed on the Github ...