Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

learn more… | top users | synonyms

0
votes
2answers
28 views

Malware from TPB(piratebay) infected my pc. I need to transfer my data into external hdd before wiping my hard drive

OS: Windows (Primary), Ubuntu (secondary). Few days back I was using TPB(piratebay) obviously for educational purposes,even though I have ad-blocker at the time of browsing some advertisement did pop-...
0
votes
1answer
80 views

Microsoft Edge start page is hijacked and can't be changed

I've installed something that kindly added thesearch.net as a default homepage and search to all of my browsers on Windows 10. I've managed to remove it from all of my browsers except one: Microsoft ...
-1
votes
1answer
26 views

Can zip files be used to infect an Android device with malware

I received a virus infected zip file and in a moment of insanity (I had just woken up) opened it in Root Explorer (my phone is rooted). I know it is infected because a) Avast detected it on my PC and ...
0
votes
4answers
169 views

Malware: how to remove annoying extra argument when Firefox & Chrome processes start

I am in the midst of a malware cleanup, as a result of making the rookie mistake of trying out an .exe file from an unreliable source. Anyway, the malware seemingly turned out to be some sort of ...
0
votes
1answer
44 views

Two winlogon.exe process - Do I have malware

Recently I started to use sysinternals tools. I recevied acomputer that I was told that as malware. I can't spot anything suspicion exept one thing: I opened process explorer and saw that there are 2 ...
1
vote
1answer
29 views

What does “unified” windows 10 mean for malware/vulnerabilities?

If I understand the new windows 10 "unified" approach correctly, Microsoft is trying to use the same underlying layer for all windows 10 versions (desktop, tablet, phone, ...) so that the app store ...
-1
votes
0answers
24 views

Browser redirected via malware [duplicate]

I know this may seem lazy to post a question like this here but I've tried everything and getting a bit desperate. Lately my Internet Browser (Chrome) has been redirecting me to random advertisment ...
0
votes
0answers
20 views

File analysis for potential malware in a fresh VM?

If I wanted to find out if a file is truly a virus, and not just a false positive, I'd imagine I would need to run the file in a fresh windows VM and track all changes made to the entire OS post-...
-1
votes
0answers
30 views

Some computers running very slow and when restarted the OS doesn't load

In my company the last two days were a chaos. 4 computers of our team had the same problem, exactly the same problem: All of them begin to being slow, very very slow, and when the owners restarted ...
117
votes
5answers
18k views

Why does anti-virus software not delete the viruses, malware, etc., but instead quarantine them?

Why does anti-virus software not completely delete the viruses, malware, etc., but instead quarantine them? Is it not better to completely get rid of them? Why? And how can I manually remove them?
-2
votes
3answers
88 views

unlock cmd.exe, hijacked by malware [closed]

Re-edit the question Jul 5/2015: A malware (winlogon fake process) lock cmd.exe, regedit.exe, taskmgr.exe, msconfig.exe, taskkill.exe, tasklist.exe, wscript.exe, taskmgr.exe, taskmon.exe, system ...
0
votes
1answer
39 views

Is “hstart.exe” harmful to my computer?

Today, Malwarebytes Anti-malware notified me that it had quarantined a malware, right after I logged in. It looked like this: But, when I searched the file, hstart.exe, I didn't get a definitive ...
0
votes
0answers
82 views

I got a strange banner on Chrome asking me to “update my account”. Is it legitimate, or is it some sort of malware?

tl;dnr: A vaguely written banner appeared while I was searching on Google (description in 1st paragraph), asking me to update my account, and not much more, which didn't seem right. What is it, is ...
0
votes
0answers
28 views

My audio and video drivers are not working, planning on factory reset, is this the appropriate solution? [duplicate]

I recently downloaded a packaged application, accidentally installing a dozen unwanted programs. They are literally causing pop ups to randomly happen and it seems that over half of the unwanted ...
0
votes
2answers
74 views

Data encrypted by LOCKY virus [duplicate]

Is there any way to decrypt the data which is affected and encrypted by locky ransomeware hackers. one of our companies system (windows 7) is affected. i have Ubuntu installed on my PC. please help ...
-1
votes
0answers
28 views

How to remove indeed.com malware? [duplicate]

Since a few days I have some adware on my browser (you know, just like extra toolbars or a starting page). I get this sidebar from indeed.com on multiple websites (stackoverflow too for example): ...
0
votes
1answer
36 views

A malware in Mozilla, An URL opens automatically? [duplicate]

Some times when I open a site in Mozilla, a URL that starts with vadabzauefrpph4xraz8ewblhsbsbxkfq7sx8d9me4nuemgnx2yt5cnyfzzlxek.com will replace with the site's URL, What should I do to solve this ...
1
vote
1answer
184 views

Where do I find the Cerber executable and Registry entries?

A server I am administrating has been infected by a ransomware named Cerber. They demand a payment (as is the point of such viruses). As of now I have narrowed the infection source down and removed ...
0
votes
1answer
36 views

Recovering files from a computer attacked by a malware or virus that encrypts all of my files

My computer (running Windows 8.1) was infected by a malware or virus yesterday. Now all of my files are encrypted such as music, videos, documents… Now I want to recover all of my files.
0
votes
1answer
37 views

How does a botnet client gain access to the user's username and password?

How does a botnet client gain access to the user's username and password? I assume it must then send these details as well as the user's IP address to the CnC server. Does it use some kind of ...
0
votes
1answer
48 views

pseudohydrophobia process Mac

Recently I started noticing when I browse a web page in my MBP 10.10.5 Yosemite that Chrome Canary Version 53 was opening a new tab or some pages were not opening...this tab was redirecting me to ...
0
votes
0answers
34 views

hdparm -N /dev/sda fails

Progression of events; Made a bootable Ubuntu 16.04 LTS USB key. Booted said key. Selected try Ubuntu without installing. Opened a terminal window. Typed hdparm -N /dev/sda Output was: /dev/sda: ...
-1
votes
3answers
77 views

Accessing a malicious website through virtual machine

I want to watch a series of episodes on a website that I found on the internet which happened to be malicious. Unfortunately, I couldn't find different websites that provide those episodes. For my ...
0
votes
1answer
52 views

C:\Windows\SysWOW64\Rundll32.exe process eating all my resources

I have the process as mentioned in the question using nearly all my resources, both processing and memory, even though I have nothing else running. When I end the process, it seems to just start ...
0
votes
0answers
37 views

What is this possible malware or virus bar that keeps saying “Upgrade to premium”?

What is this "Upgrade to premium" that appear every once in a while while I'm browsing, it has shown up on multiple sites. Is it something on my browser or on my mac? I'm using a macbook pro with OS ...
1
vote
2answers
303 views

unwanted chinese/korean program installed unable to remove it from any where

members some unknown Chinese program has uninstalled in my system I have tried many antivirus and malware removal programs without any clue as what this program is. Finally I am posting a screenshot ...
0
votes
2answers
28 views

I am unable to remove browser hijacker

I have noticed many times after few weeks my browser's search engine gets changed to some conduict search engine. But today i found a reason I found some suspicious third party software and when i ...
3
votes
2answers
536 views

nslookup returning fake results for one particular domain

I've just noticed some very strange and concerning results when I attempted to do an nslookup for a one of my domain names from one of my hosted virtual servers. The domain [mydomain].info is ...
0
votes
1answer
22 views

Does anybody know how to uninstall a malicious chrome addon called websecurity?

Does anybody know how to uninstall a chrome addon called websecurity? One day it randomly appeared in chrome. It says it was installed by an enterprise policy. I have tried searching for its extension ...
0
votes
0answers
33 views

Is it possible that I got a virus without clicking what I downloaded? [duplicate]

A couple of days ago I accidentally downloaded a file that looked very shady. My antivirus (Avira) pinged me that the file was suspicious, so I immediately deleted it, and then cleared my browsers ...
1
vote
1answer
40 views

How does the locky malware work?

I've been hearing a lot about the locky malware recently. I've heard that it can be deployed through Word macros. I'd like to know how the malware can do it's thing without needing administrator ...
0
votes
0answers
7 views

File Segment Unreadable Error After Upgrade/Malware Restart

I tried upgrading from Windows 7 to Windows 10 but the upgrade tool MediaCreation seemed to be held up when initiating the restart, so I cancelled the installation. Before I initiated the install ...
0
votes
0answers
45 views

Remove ads malware from Chrome

A malware smuggled its way into my chrome. It ads ad JS snippet into footer, before tag: However, what's peculiar is that I found that it only injects itself into one website: http://www.fabrika....
3
votes
0answers
83 views

Is this a ransomware?

I just got this window on my main computer: Apparently, it's from Windows. I checked, the process EXE file is the original one (efsui.exe or something like that). But the thing is, I don't use EFS (...
0
votes
1answer
48 views

How can a malware site take control of Chrome?

I've had quite a scare today - the second time this month. I tried browsing to speedtest.net to test my connection, and I must have mistyped something (the last time that happened, I mistyped "google")...
1
vote
1answer
94 views

Ghost USB drives don't go away on Windows 10

Briefly, I have phantom USB drives that showed up a week ago. Rolling back to a "clean" backup that was stored on a disconnected disk didn't solve the problem. I had that previously when I had a major ...
0
votes
0answers
12 views

How to remove hidden folder shortcut malware [duplicate]

How to remove the virus/worm which creates a shortcut that runs a payload whose name is randomly generated. It puts the current content under a hidden folder. And displays the boobytrapped shortcut ...
3
votes
1answer
83 views

Is my router infected? DNS settings affected

I see that when I browse on my mobile devices (phones, tablets) in my network, the browser gets redirected to malware/adware that says my device is damaged and I should repair it, install some ...
2
votes
1answer
71 views

Cerber - why were some files not encrpted?

I was hit by Cerber on the weekend. This surprised me given I was running Grindsoft Anti-Malware in addition to Defender, although I suspect Grindsoft real-time protection was off given there had ...
0
votes
0answers
23 views

more problems post malware scan and defrag than before

ok so, the little hiccups my PC has been having have turned into a full on dry heave. the issues i used to have were as follows: I have windows 7 and for some reason it keeps telling me to shut down ...
-3
votes
3answers
156 views

Received a .vbs on Skype and ran it

I received a .vbs file on Skype and ran it.. Please let me know if it does anything? the code contained
0
votes
2answers
127 views

Can Virtual Box/VMware infect the host PC when testing Cryptolocker?

Can cryptolocker encrypt the host PC if I test it on a Virtual Machine? Currently I am using 'NAT' as my network type or whatever...
3
votes
2answers
61 views

Hidden Files: Odd large system files taking up space on hard drive

In the above image there are four large files with names composed of what appear to be random (non-Roman) Unicode characters. I have no idea where they came from. Is anyone familiar with these? Do I ...
1
vote
3answers
945 views

How to remove Amazon Assistant that was installed by Java installer?

I recently did a clean install of Java about a week or two ago. It asked whether I wanted the Amazon button app installed. I opted NO. It still installed anyway. I removed it from Control Panel -> ...
1
vote
1answer
121 views

Weird-looking Registry entry under HKCU\Software\Classes (is it a virus)?

I wanted to set Photoshop as my default image viewer (need a workaround because Windows doesn't recognize it), so I have to edit my Registry. In the tutorial on the official Adobe website, they say to ...
-3
votes
2answers
95 views

Youtube link gave me a virus?

I was watching a Youtube video, and I then clicked on a "View all replies" link under a comment. I tried this again 2 times, and none of the clicks had worked. Immediately afterwards, three console ...
1
vote
2answers
55 views

Why are my router's DNS settings changing?

I'm using d-link 2600U router (updated to latest firmware). My router's DNS setting keep changing and my browser redirects to adult websites and fake ads. I scanned my computer with this softwares: - ...
0
votes
1answer
34 views

Malware Allowing Remote Access to my Machine

I would like to understand how Malware allows a remote connection to my machine. Am I correct in thinking that my modem / router will block all inbound connections from the internet? A scan has shown ...
0
votes
0answers
19 views

How to track what's creating a temp file? [duplicate]

On every bootup, a file named gxxx.tmp.exe is created in %temp% and the name changes every time. How do I find what's creating this? Here is the file https://malwr.com/analysis/...
1
vote
2answers
40 views

Can Malware infect a machine with UAC enabled and not elevating a process

Is it possible for Malware to infect a machine (i.e. not just a user account) running in a standard user account when UAC is enabled, if the process is not elevated? I ask because I want to know how ...