Questions tagged [malware]
Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.
1,044
questions
0
votes
0
answers
254
views
Is there a comprehensive list of devices affected by KV botnet malware infections?
According to this January 31, 2024 article in Ars Technica:
Chinese malware removed from SOHO routers after FBI issues covert commands
Routers were being used to conceal attacks on critical ...
10
votes
1
answer
4k
views
An unrelated program (Clash for Windows) links to FFmpeg libraries. Can it be spyware?
I recently found that a proxy program (Clash for Windows) that I installed on my Windows PC always links to DLLs that are unrelated to its function.
It has DLLs of FFmpeg, DirectX, OpenGL, and Vulkan ...
0
votes
2
answers
94
views
New Machine Compromised? Should I Care?
I have a ~brand-new (10 days since unpackaging) machine that had a funny pop-up (lower-right corner of below screenshot) appear just now. The only modifications I have made have been
Install the ...
0
votes
0
answers
83
views
Black screen after Windows logo. What is happening to my machine?
I downloaded a PDF version of a book from internet archives on my smartphone and transferred it to my PC via Bluetooth, read it for 10-15 mins, and then attended a call from a friend while my PC was ...
1
vote
2
answers
223
views
How to stop all web-workers? They're draining my battery
A great many websites leave "web workers" running in the background even after you've left their website and closed the browser tab.
I'm told that the only way to kill them all is to clear ...
0
votes
4
answers
2k
views
How to fix/investigate Windows Defender detecting malware in the VSS snapshots for Firefox cached files?
Update: Seems solved as of March 4.
I was able to remove the bypass (path exclusion in Defender) and perform backups without malware detection, even after re-accessing the site linked in the original ...
3
votes
1
answer
240
views
Are spare sectors stored in a hard drive's Host Protected Area (HPA)?
I need to wipe some used hard drives before using them in case they contain malware. Is it safe to remove the host protected area?
Is the HPA used to store spare sectors? It is only 1 MB but might ...
0
votes
2
answers
475
views
Windows 10 CMD Command Prompt opens and closes for split second. Possible Malware?
Every now and then I get a random command window open and closes for a split second. I can't see what it is. But I'm assuming it is a scheduled thing. I just want to be safe. From the get scheduled ...
0
votes
0
answers
52
views
Wireshark showing packet exchanges with unconnected IPs
Running Wireshark on a PC for network monitoring and I noticed something strange. Application data is being exchanged with websites that are not open in the browser, or on any other device on the ...
0
votes
0
answers
16
views
Can guest access host clipboard despite sharing turned off?
Host: Win10
Guest: Linux
Software: VirtualBox
Clipboard information might not seem important, but it could very well contain a copied password or other useful data. On the host, clipboard history is ...
0
votes
0
answers
129
views
If a .gz file was downloaded can it demage my computer or steal data?
I was unaware that I was on a data phishing landing page (it was very clever, I haven't seen anything like this before) and I downloaded a .gz file. After that it started to become suspicius so I ...
0
votes
1
answer
412
views
urxvt prompt starts in the middle of screen and tmux shows gibberish when started from it
Lately I noticed that my terminal prompt on urxvt does not start on the first line when I open it, but on the middle of the screen. Also when later I execute tmux command to use tmux inside a urxvt ...
0
votes
0
answers
714
views
Strange window opens randomly and closes very quickly
It has been some time now that in Windows 11, I experience this weird issue:
Now and then, I see a window (something bigger than a command prompt) opening and closing immediately.
It has a blue color, ...
0
votes
2
answers
135
views
I bought an open-box laptop. Should I reset Windows?
Some time ago I bought a cheap laptop, essentially a netbook, to ensure that if my main laptop stopped working, I would have a laptop to work on while my main laptop was being repaired.
The box for ...
0
votes
1
answer
472
views
Can the boot USB get infected if PC is infected?
I want to create a Windows 11 boot USB stick. That's not the problem though as this is easy with the Microsoft provided tool.
What I do want to know is, let's assume your computer is infected, you try ...
0
votes
1
answer
73
views
Is it possible to get infected while entering a mispelled url?
I accidentally mispelled hotmail, so instead of that I entered hotmoil(dot)com. I did closed fast my browser when I noticed but is it possible to be infected? I saw no new downloads and I am using ...
0
votes
1
answer
55
views
Why is limited access to file_system in Windows to prevent malware still not a thing? [closed]
It is 2023, and how do we still not have a proper solution to it?
Android manages it very well by restricting important app_data files to each app, and apart from that android also has limited access ...
1
vote
0
answers
92
views
Is it safer to use a VM and VPN for working with other people's python scripts or executables?
I want to start taking freelancing jobs doing python programming, but I am new to working for others. I want to do everything I can to avoid scams and having my computer infected with malware. I know ...
0
votes
2
answers
813
views
I am getting a weird error unauthorized changes blocked controlled folder access blocked OMApSvcBroker.exe . Do you think it is some sort of virus?
Here is the image below:
I have run windows defender multiple times nothing shows up. I also ran RKill + Malwarebytes ADW cleaner + Hitman pro
removal programs. The only thing I have not done in a ...
0
votes
0
answers
31
views
I can't use any of my antivirus, and none of it will load (or the websites) will load. help please [duplicate]
i cant go to an antivirus website, nor can i open malwarebytes because it says "The application was unable to start correctly (0xc0000017). Click OK to close the application." im aware that ...
0
votes
1
answer
201
views
Chrome trying to download something?
Lately my Kaspersky antivirus has been showing weird notifications ahout blocking download attempts made from Chrome because it contains adware and such. Here's the log:
Event: Download denied
User: ...
-1
votes
2
answers
69
views
"Windowns Setting": Result from Win 10 search bar
The question is whether the search bar result displaying an unlikely spelling error can be ignored or is a clue to the presence of something malicious.
It began with my need to know more about ...
0
votes
1
answer
111
views
ISP Notice Regarding Infected Computer and Potential Disconnection
Recently, my parents received an email supposedly from the ISP (Internet Service Provider) stating that their computer is infected and if they don't take steps to clean it, they may face disconnection ...
0
votes
0
answers
40
views
PHP website getting hacked - dir names changed
I'm new to PHP and Apache. I come from Node.js/Java backends and I'm new to this tech stack (PHP, CGI, Apache etc). My site currently uses ckeditor to handle user uploads and has high traffic. Often, ...
0
votes
0
answers
296
views
Possibly Malicious code execution on startup
Checked my event viewer to see if my system was starting any funny commands. This is due to the fact i noticed a sudden slowdown on my pc after startup.
Im wondering if an event like this is normal; ...
0
votes
0
answers
57
views
Dotted transparent selection box appears after closing Word documents
When I close Microsoft Word files, this annoying dotted transparent selection box appears on my desktop home screen.
When I close any other file type, a translucent selection box appears, which seems ...
0
votes
1
answer
804
views
Suspicious script meddling with /usr/bin/open
I'm on macOS Ventura 13.2.1 (22D68). I run a script in my computer and the outcome was pretty much as described in this post. So some files were installed to the /tmp/ folder, and the Opera browser ...
0
votes
0
answers
91
views
Would it be possible to create a batch file or windows task for malware check?
Would it be possible to create a batch file or windows task that would monitor all drives for any new files showing up, calculate their hash and check virus total for malware flag, then if malware ...
1
vote
1
answer
110
views
Is situation (with GPG) possibly a malware attack?
I am taking care of an ubuntu server (22.04) and suddenly I was not able to access some files via FTP. I checked a few things and noticed a gpg root process consuming a lot of CPU. It kept restarting ...
0
votes
1
answer
34
views
When AV software puts files and various malicious "objects" in "quarantine", what exactly do they actually do?
I had malware on a computer, which Malwarebytes managed to remove. Or did it? It rather "put it in quarantine". And it's remained like that. I see no way to actually delete it.
This appears ...
0
votes
1
answer
3k
views
What is “Service Host: Secondary Logon?” Is this a sign of malware?
I found the process “Service Host: Secondary Logon” running under windows processes in task manager, with command line file in system32 svchost.exe, which I‘ve found running under my username at least ...
0
votes
1
answer
116
views
Volume boot record virus infection
My pc have a RAT which survive after system format.
It's fully undetectable from any antivirus software and av rescue disks ...
I've tried to flash my BIOS.
Then i used that command from linux ...
0
votes
0
answers
102
views
RunDLL and Regsvr32 Exploits - how to mitigate or stop? [duplicate]
I have installed Malwarebytes and Spyhunter 5 and run full scans and yet Malwarebytes still shows blocked calls to nefarious domains and IPs via regsvr32 and rundll32. Is there a way to find the ...
0
votes
1
answer
672
views
Cannot delete a .dll file [duplicate]
I downloaded Internet Download Manager from a piracy website and after downloading I tried to install it. I read the instruction manual given with the file and followed it but later I couldn't install ...
1
vote
0
answers
2k
views
Found xmrig running on new server, is what I did to remove it enough?
I saw my server's cpu usage was at 100%, so I investigated a bit and found Xmrig running.
This is a Vultr OpenLiteSpeed Django server. I had installed CyberPanel via the cyberpanel install script on ...
1
vote
2
answers
221
views
Prevent any batch file from closing automatically
I am worried my machine may be infected with malware. When I first log in there are batch scripts that open and close automatically very fast. Is there a way to see what program(s) executed a batch ...
0
votes
1
answer
1k
views
Is ExpressVPN trying to install malware on my PC?
I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan:
HEUR:Trojan.Win64.Reincarnation.gen
Kaspersky'...
0
votes
1
answer
675
views
How is it possible to be infected by a Trojan without downloading anything suspicious?
After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
3
votes
1
answer
12k
views
Suspicious Executable - Samsung Magician
I'm hoping someone may be able to give me some input on an executable I found running every time I boot up my PC. I use the Samsung Magician software which runs on startup, but it wasn't until today I ...
0
votes
1
answer
4k
views
7zip program infected with malwares and viruses [duplicate]
7zip program infected with malwares and viruses.
Virus Total scanned the installer as good with malicious and suspecious relations.
The 7-zip program
7-zip v22.01 - (may be infected)
From the Virus ...
0
votes
1
answer
68
views
Find/Remove suspected virus/malware on macbook air (mapi.sport80.com)
I've found a program running on a friend's Mac that is under the name "mapi.sport80.com" in screen time & it has been running consistently for 5 days straight, it looks to be accessing ...
1
vote
0
answers
338
views
Loss of control over my computer mouse
I've had this strange thing happen to me on 3 separate computers running Windows 10 now (on my work computer at a previous job, on my previous home computer, and now on my work computer at my current ...
1
vote
1
answer
222
views
Automatic BIOS Update - No logs confirm legitimacy
As the title states. I rebooted my PC today and was greeted with a "BIOS is updating. Do not turn off or unplug from power."
I have an Asus Sabertooh Z170 mark 1. The only Asus utility I ...
2
votes
0
answers
280
views
Are files without extension dangerous?
I recently run a test with Bitdefender and there were several encrypted files that it could not check.
All of them in were in APO.zip files which were contained in another Zip files.
Some of them were ...
-1
votes
1
answer
190
views
Is there an option to make Microsoft Safety Scanner ask before removing what it thinks is malware?
Is there an option to make Microsoft Safety Scanner link ask before removing what it thinks is malware?
It looks like it might try to remove what it thinks is malware immediately and without asking, ...
2
votes
3
answers
2k
views
Is AV scanning zip files with non-exe contains re-assuring/reliable?
I was wondering how safe is scanning a .zip file and depending on the AV report on what to do with it. So specifically:
If I have a .zip file and I run a scan using a good antivirus and does not ...
1
vote
1
answer
290
views
ANONYM USER whatis this ? i never saw this before
I was searching for some info on sdhl.dat and found this:
Hello
I have a .dat file on my PC and every time I try to delete it, it comes back after restarting the PC. After some search I found this &...
0
votes
0
answers
36
views
System process overwritten entire folder of images
I noticed abnormal amounts of disk access, checked Resource Monitor and saw "System" writing millions of bytes to various files in one folder. Checked the folder in question, the thousands ...
4
votes
1
answer
8k
views
All my Chrome searches are redirected through www.getsearchredirecting.com
Since recently (I don't know exactly when it started), all the searches I do on Chrome search bar are redirected through this site www.getsearchredirecting.com.
I did a malware scan with two common ...
0
votes
0
answers
45
views
Windows 10: Can't get Rid of Malware Popups Notifications Spoofing Antivirus [duplicate]
I'm using Windows 10 Home, and I'm this popup, that keeps coming up at random times, at least hourly:
And, just a few minutes ago, this:
I have disabled all popups in Internet Options.
I ran ...