Questions tagged [malware]

Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

Filter by
Sorted by
Tagged with
0 votes
0 answers
254 views

Is there a comprehensive list of devices affected by KV botnet malware infections?

According to this January 31, 2024 article in Ars Technica: Chinese malware removed from SOHO routers after FBI issues covert commands Routers were being used to conceal attacks on critical ...
Giacomo1968's user avatar
  • 54.7k
10 votes
1 answer
4k views

An unrelated program (Clash for Windows) links to FFmpeg libraries. Can it be spyware?

I recently found that a proxy program (Clash for Windows) that I installed on my Windows PC always links to DLLs that are unrelated to its function. It has DLLs of FFmpeg, DirectX, OpenGL, and Vulkan ...
Guanyuming He's user avatar
0 votes
2 answers
94 views

New Machine Compromised? Should I Care?

I have a ~brand-new (10 days since unpackaging) machine that had a funny pop-up (lower-right corner of below screenshot) appear just now. The only modifications I have made have been Install the ...
Ryan Farber's user avatar
0 votes
0 answers
83 views

Black screen after Windows logo. What is happening to my machine?

I downloaded a PDF version of a book from internet archives on my smartphone and transferred it to my PC via Bluetooth, read it for 10-15 mins, and then attended a call from a friend while my PC was ...
Qwerty's user avatar
  • 101
1 vote
2 answers
223 views

How to stop all web-workers? They're draining my battery

A great many websites leave "web workers" running in the background even after you've left their website and closed the browser tab. I'm told that the only way to kill them all is to clear ...
user avatar
0 votes
4 answers
2k views

How to fix/investigate Windows Defender detecting malware in the VSS snapshots for Firefox cached files?

Update: Seems solved as of March 4. I was able to remove the bypass (path exclusion in Defender) and perform backups without malware detection, even after re-accessing the site linked in the original ...
mins's user avatar
  • 989
3 votes
1 answer
240 views

Are spare sectors stored in a hard drive's Host Protected Area (HPA)?

I need to wipe some used hard drives before using them in case they contain malware. Is it safe to remove the host protected area? Is the HPA used to store spare sectors? It is only 1 MB but might ...
marksing's user avatar
0 votes
2 answers
475 views

Windows 10 CMD Command Prompt opens and closes for split second. Possible Malware?

Every now and then I get a random command window open and closes for a split second. I can't see what it is. But I'm assuming it is a scheduled thing. I just want to be safe. From the get scheduled ...
Patoshi パトシ's user avatar
0 votes
0 answers
52 views

Wireshark showing packet exchanges with unconnected IPs

Running Wireshark on a PC for network monitoring and I noticed something strange. Application data is being exchanged with websites that are not open in the browser, or on any other device on the ...
Instream's user avatar
0 votes
0 answers
16 views

Can guest access host clipboard despite sharing turned off?

Host: Win10 Guest: Linux Software: VirtualBox Clipboard information might not seem important, but it could very well contain a copied password or other useful data. On the host, clipboard history is ...
No Name's user avatar
  • 139
0 votes
0 answers
129 views

If a .gz file was downloaded can it demage my computer or steal data?

I was unaware that I was on a data phishing landing page (it was very clever, I haven't seen anything like this before) and I downloaded a .gz file. After that it started to become suspicius so I ...
Bálint Forgács's user avatar
0 votes
1 answer
412 views

urxvt prompt starts in the middle of screen and tmux shows gibberish when started from it

Lately I noticed that my terminal prompt on urxvt does not start on the first line when I open it, but on the middle of the screen. Also when later I execute tmux command to use tmux inside a urxvt ...
Kristi Begaj's user avatar
0 votes
0 answers
714 views

Strange window opens randomly and closes very quickly

It has been some time now that in Windows 11, I experience this weird issue: Now and then, I see a window (something bigger than a command prompt) opening and closing immediately. It has a blue color, ...
Stefano Capasso's user avatar
0 votes
2 answers
135 views

I bought an open-box laptop. Should I reset Windows?

Some time ago I bought a cheap laptop, essentially a netbook, to ensure that if my main laptop stopped working, I would have a laptop to work on while my main laptop was being repaired. The box for ...
Mitsuko's user avatar
  • 171
0 votes
1 answer
472 views

Can the boot USB get infected if PC is infected?

I want to create a Windows 11 boot USB stick. That's not the problem though as this is easy with the Microsoft provided tool. What I do want to know is, let's assume your computer is infected, you try ...
Idontknowbasics's user avatar
0 votes
1 answer
73 views

Is it possible to get infected while entering a mispelled url?

I accidentally mispelled hotmail, so instead of that I entered hotmoil(dot)com. I did closed fast my browser when I noticed but is it possible to be infected? I saw no new downloads and I am using ...
Idontknowbasics's user avatar
0 votes
1 answer
55 views

Why is limited access to file_system in Windows to prevent malware still not a thing? [closed]

It is 2023, and how do we still not have a proper solution to it? Android manages it very well by restricting important app_data files to each app, and apart from that android also has limited access ...
Someone's user avatar
  • 157
1 vote
0 answers
92 views

Is it safer to use a VM and VPN for working with other people's python scripts or executables?

I want to start taking freelancing jobs doing python programming, but I am new to working for others. I want to do everything I can to avoid scams and having my computer infected with malware. I know ...
Scarlett's user avatar
0 votes
2 answers
813 views

I am getting a weird error unauthorized changes blocked controlled folder access blocked OMApSvcBroker.exe . Do you think it is some sort of virus?

Here is the image below: I have run windows defender multiple times nothing shows up. I also ran RKill + Malwarebytes ADW cleaner + Hitman pro removal programs. The only thing I have not done in a ...
trewbth's user avatar
0 votes
0 answers
31 views

I can't use any of my antivirus, and none of it will load (or the websites) will load. help please [duplicate]

i cant go to an antivirus website, nor can i open malwarebytes because it says "The application was unable to start correctly (0xc0000017). Click OK to close the application." im aware that ...
pixel's user avatar
  • 1
0 votes
1 answer
201 views

Chrome trying to download something?

Lately my Kaspersky antivirus has been showing weird notifications ahout blocking download attempts made from Chrome because it contains adware and such. Here's the log: Event: Download denied User: ...
Rohith Rathod's user avatar
-1 votes
2 answers
69 views

"Windowns Setting": Result from Win 10 search bar

The question is whether the search bar result displaying an unlikely spelling error can be ignored or is a clue to the presence of something malicious. It began with my need to know more about ...
i YAM GzORM's user avatar
0 votes
1 answer
111 views

ISP Notice Regarding Infected Computer and Potential Disconnection

Recently, my parents received an email supposedly from the ISP (Internet Service Provider) stating that their computer is infected and if they don't take steps to clean it, they may face disconnection ...
eLAINe's user avatar
  • 1
0 votes
0 answers
40 views

PHP website getting hacked - dir names changed

I'm new to PHP and Apache. I come from Node.js/Java backends and I'm new to this tech stack (PHP, CGI, Apache etc). My site currently uses ckeditor to handle user uploads and has high traffic. Often, ...
Leonardo Santos's user avatar
0 votes
0 answers
296 views

Possibly Malicious code execution on startup

Checked my event viewer to see if my system was starting any funny commands. This is due to the fact i noticed a sudden slowdown on my pc after startup. Im wondering if an event like this is normal; ...
N S's user avatar
  • 9
0 votes
0 answers
57 views

Dotted transparent selection box appears after closing Word documents

When I close Microsoft Word files, this annoying dotted transparent selection box appears on my desktop home screen. When I close any other file type, a translucent selection box appears, which seems ...
Mattpats's user avatar
  • 121
0 votes
1 answer
804 views

Suspicious script meddling with /usr/bin/open

I'm on macOS Ventura 13.2.1 (22D68). I run a script in my computer and the outcome was pretty much as described in this post. So some files were installed to the /tmp/ folder, and the Opera browser ...
aaragon's user avatar
  • 103
0 votes
0 answers
91 views

Would it be possible to create a batch file or windows task for malware check?

Would it be possible to create a batch file or windows task that would monitor all drives for any new files showing up, calculate their hash and check virus total for malware flag, then if malware ...
insecureenthusiast's user avatar
1 vote
1 answer
110 views

Is situation (with GPG) possibly a malware attack?

I am taking care of an ubuntu server (22.04) and suddenly I was not able to access some files via FTP. I checked a few things and noticed a gpg root process consuming a lot of CPU. It kept restarting ...
Jorge's user avatar
  • 121
0 votes
1 answer
34 views

When AV software puts files and various malicious "objects" in "quarantine", what exactly do they actually do?

I had malware on a computer, which Malwarebytes managed to remove. Or did it? It rather "put it in quarantine". And it's remained like that. I see no way to actually delete it. This appears ...
C. Naslund's user avatar
0 votes
1 answer
3k views

What is “Service Host: Secondary Logon?” Is this a sign of malware?

I found the process “Service Host: Secondary Logon” running under windows processes in task manager, with command line file in system32 svchost.exe, which I‘ve found running under my username at least ...
user3709's user avatar
  • 119
0 votes
1 answer
116 views

Volume boot record virus infection

My pc have a RAT which survive after system format. It's fully undetectable from any antivirus software and av rescue disks ... I've tried to flash my BIOS. Then i used that command from linux ...
Zanarhi's user avatar
0 votes
0 answers
102 views

RunDLL and Regsvr32 Exploits - how to mitigate or stop? [duplicate]

I have installed Malwarebytes and Spyhunter 5 and run full scans and yet Malwarebytes still shows blocked calls to nefarious domains and IPs via regsvr32 and rundll32. Is there a way to find the ...
Jay Croghan's user avatar
0 votes
1 answer
672 views

Cannot delete a .dll file [duplicate]

I downloaded Internet Download Manager from a piracy website and after downloading I tried to install it. I read the instruction manual given with the file and followed it but later I couldn't install ...
Nazmul Hasan Shipon's user avatar
1 vote
0 answers
2k views

Found xmrig running on new server, is what I did to remove it enough?

I saw my server's cpu usage was at 100%, so I investigated a bit and found Xmrig running. This is a Vultr OpenLiteSpeed Django server. I had installed CyberPanel via the cyberpanel install script on ...
Vellutante's user avatar
1 vote
2 answers
221 views

Prevent any batch file from closing automatically

I am worried my machine may be infected with malware. When I first log in there are batch scripts that open and close automatically very fast. Is there a way to see what program(s) executed a batch ...
user avatar
0 votes
1 answer
1k views

Is ExpressVPN trying to install malware on my PC?

I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan: HEUR:Trojan.Win64.Reincarnation.gen Kaspersky'...
user0713's user avatar
0 votes
1 answer
675 views

How is it possible to be infected by a Trojan without downloading anything suspicious?

After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
Aqqqq's user avatar
  • 171
3 votes
1 answer
12k views

Suspicious Executable - Samsung Magician

I'm hoping someone may be able to give me some input on an executable I found running every time I boot up my PC. I use the Samsung Magician software which runs on startup, but it wasn't until today I ...
user1736545's user avatar
0 votes
1 answer
4k views

7zip program infected with malwares and viruses [duplicate]

7zip program infected with malwares and viruses. Virus Total scanned the installer as good with malicious and suspecious relations. The 7-zip program 7-zip v22.01 - (may be infected) From the Virus ...
smith john's user avatar
0 votes
1 answer
68 views

Find/Remove suspected virus/malware on macbook air (mapi.sport80.com)

I've found a program running on a friend's Mac that is under the name "mapi.sport80.com" in screen time & it has been running consistently for 5 days straight, it looks to be accessing ...
Fergus Johnson's user avatar
1 vote
0 answers
338 views

Loss of control over my computer mouse

I've had this strange thing happen to me on 3 separate computers running Windows 10 now (on my work computer at a previous job, on my previous home computer, and now on my work computer at my current ...
Daar's user avatar
  • 111
1 vote
1 answer
222 views

Automatic BIOS Update - No logs confirm legitimacy

As the title states. I rebooted my PC today and was greeted with a "BIOS is updating. Do not turn off or unplug from power." I have an Asus Sabertooh Z170 mark 1. The only Asus utility I ...
SheerKahn's user avatar
  • 121
2 votes
0 answers
280 views

Are files without extension dangerous?

I recently run a test with Bitdefender and there were several encrypted files that it could not check. All of them in were in APO.zip files which were contained in another Zip files. Some of them were ...
Dom's user avatar
  • 65
-1 votes
1 answer
190 views

Is there an option to make Microsoft Safety Scanner ask before removing what it thinks is malware?

Is there an option to make Microsoft Safety Scanner link ask before removing what it thinks is malware? It looks like it might try to remove what it thinks is malware immediately and without asking, ...
barlop's user avatar
  • 23.8k
2 votes
3 answers
2k views

Is AV scanning zip files with non-exe contains re-assuring/reliable?

I was wondering how safe is scanning a .zip file and depending on the AV report on what to do with it. So specifically: If I have a .zip file and I run a scan using a good antivirus and does not ...
Jim's user avatar
  • 185
1 vote
1 answer
290 views

ANONYM USER whatis this ? i never saw this before

I was searching for some info on sdhl.dat and found this: Hello I have a .dat file on my PC and every time I try to delete it, it comes back after restarting the PC. After some search I found this &...
Daniel's user avatar
  • 13
0 votes
0 answers
36 views

System process overwritten entire folder of images

I noticed abnormal amounts of disk access, checked Resource Monitor and saw "System" writing millions of bytes to various files in one folder. Checked the folder in question, the thousands ...
VBW's user avatar
  • 1
4 votes
1 answer
8k views

All my Chrome searches are redirected through www.getsearchredirecting.com

Since recently (I don't know exactly when it started), all the searches I do on Chrome search bar are redirected through this site www.getsearchredirecting.com. I did a malware scan with two common ...
Bakaburg's user avatar
  • 251
0 votes
0 answers
45 views

Windows 10: Can't get Rid of Malware Popups Notifications Spoofing Antivirus [duplicate]

I'm using Windows 10 Home, and I'm this popup, that keeps coming up at random times, at least hourly: And, just a few minutes ago, this: I have disabled all popups in Internet Options. I ran ...
MSIS's user avatar
  • 115

1
2 3 4 5
21