New answers tagged

0

freerdp is now displaying the remote desktop thumbprint in SHA256 format. Before that, it was displaying it in SHA1 format. Windows is still displaying it in SHA1 format hence when you look at it visually, the numbers don't match. You can extract the certificate in Windows and generate a SHA256 for the certificate. Run the following on the extracted ...


0

Using SMB shares over internet is often throwned upon because it causes headaches to firewal admins. While (more) standard protocol like SSH (including SFTP), SMTP, or IMAP only require opening one single port server side (22 for SSH), or one port for raw protocol and a distinct one for the SSL version, SMB requires a bunch of ports. Simply finding which ...


2

how secure is my setup? 0-day exploits notwithstanding you're secure as long as your users/passwords combinations are secure as well and you install Windows updates immediately after they are released and reboot afterwards. Provided that my computer has some sensitive data in it. People generally oppose having CIFS ports wide open to the Internet, however ...


1

Short answer: "Tnega!MSR" probably has sense only for people that are actually coding the AV, some of them try to put the name of the malware in the detection, but when a file doesn't match any known malware patterns then it might be detected as malware by other heuristical internal engines of the AV and the detection can be some sort of id of what ...


5

I don't have the rep to place a comment on hft's answer, but Process Explorer (from Sysinternals, owned by Microsoft) can connect to VirusTotal to check if any running processes are malicious. To my knowledge it can be used to check any process which Process Explorer sees. HowToGeek has a relatively modern overview of it as well here


12

Does anyone here know the alias used for "Tnega!MSR" by other antiviruses, or can point me to a resource so I can find it out myself? Use the VirusTotal website. They have a lot of information on all the various names for this malware here For example, Defender calls it "Trojan:Win32/Tnega!MSR", ESET calls it "Win32/RA-based.NJV&...


Top 50 recent answers are included