The tag has no usage guidance.

learn more… | top users | synonyms

10
votes
5answers
187 views

How can I make my OS appear as if it is running virtualized?

A lot of malware these days is able to detect when it is running virtualized under VMWare, VirtualPC, WINE, or even in a sandbox such as Anubis or CWSandBox. This essentially means that malware will ...
7
votes
2answers
830 views

csrss.exe anomalies, is this a rootkit?

I'm seeing a strange anomaly in some systems I support. GMER flags the cdd.dll thread in csrss.exe, and when I run Process Explorer with Elevated Admin rights, I am: unable to view any loaded DLLs ...
6
votes
1answer
2k views

uTorrent - adware / malware on download and install - Mac OSX Yosemite

I recently downloaded uTorrent (for the more ethically concerned: to get a wikipedia data dump as the official download server kept terminating my download, not to rip off copyright holders...), and ...
5
votes
2answers
2k views

What's the difference between traditional and heuristic virus scanning?

I just got off the phone with one of the major AV companies as to why a lesser known AV caught a virus that theirs didn't. The details of that delima are not important. What caught my attention ...
4
votes
3answers
1k views

How do I properly check if a program is a virus/trojan in VMware?

How I should check if a program is a virus in VMware? Some programs I do need admin ability to install and it makes sense. But how do I know if it's doing more than I want? Some thoughts are: How ...
3
votes
2answers
25k views

what does it mean for MalwareBytes to find malicious registry keys but nothing else?

I have a machine that is obviously infected, and when I ran MalwareBytes it told me that it found some "malicious" registry keys (surprisingly enough these contained file path to currently ...
3
votes
0answers
78 views

Is this a ransomware?

I just got this window on my main computer: Apparently, it's from Windows. I checked, the process EXE file is the original one (efsui.exe or something like that). But the thing is, I don't use EFS ...
3
votes
0answers
62 views

How to protect Linux from Ransomware by detecting mass changes?

I wonder if it would be possible to stop running ransomware on a Linux system by detecting mass changes on files. Can watchdog or entr or inotifywait be used to detect bulk file changes and stop what ...
3
votes
1answer
345 views

How to catch a malware process on my Mac?

Situation: 1st occurrence: without reason a new draft in mail opened up with non-sense text in the body, no TO,CC or subject 2nd and reoccurring every day around 2 PM: bing search with non-sense ...
2
votes
4answers
7k views

How can you find out if xlsx and docx files are safe to open?

I have received an email from a not entirely trustworthy source, it might be legit but I'm not really sure. It contains, among other things, information on a .docx Microsoft Word file and a .xlsx ...
2
votes
3answers
1k views

Should I disable my realtime virus protection while running a different malware scanner?

I use Microsoft Security Essentials for my virus protection but I also run scheduled scans with Malwarebytes and Spybot Search & Destroy. Should I disable the MSE realtime scanner when these other ...
2
votes
1answer
89 views

Any information about the AsyncMapLite Trojan?

I recently noticed "something" hijacking Google search results (on Firefox!) and so I decided to run a scan by Malwarebytes. Sure enough, it found a Trojan.Agent with the following information: ...
2
votes
0answers
52 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
2
votes
4answers
3k views

How can I remove http://p.chango.com/static/c.js from my site?

I found some code injected somehow on my site. It links to <script src="http://p.chango.com/static/c.js. How can I get rid of it? Is this coming from my browser? Mind you, I see it in ...
1
vote
5answers
7k views

Safely view websites that may be harmful

I posted a car on Craigslist the other day and since then I've been getting nothing but scam emails that contain links the people want me to click. I know not to clink the links and that it's a scam, ...
1
vote
1answer
1k views

Prevent Browser Search Hijack

What is the best way to prevent my browser's default search being hijacked? Also, what is the quickest/easiest way to clean up this sort of hijack? I just had to clean off all the browsers on my ...
1
vote
2answers
3k views

Monitor windows startup process

My win7 starts up pretty slow lately. I think it's some kind of malware, but my antivirus software doesn't pick up anything. How could i monitor the startup processes myself? It seems to me like ...
1
vote
2answers
834 views

Anti virus integration for Thunderbird?

Basic, newbie question: I am preparing to do a new system installation of Windows, and would like to setup Thunderbird for email. Since I am beginning with a clean slate, how should I setup my ...
1
vote
2answers
65 views

Is my anti-malware setup consistent with “best practices”?

A few days ago, my PC was acting weird and froze sometimes. I did full scans using Avast! Free Antivirus and Malwarebytes Anti-Malware since I assumed it was a virus causing these, but both software ...
1
vote
0answers
879 views

Detect and remove malicious malware chrome extension that opens many tabs with ads

I observed throughout the day yesterday three episodes where my processor gets hijacked for a minute and the memory gets maxed out (12 gigs). The culprit was a seemingly infinite number of tabs being ...
0
votes
5answers
2k views

Impossible new virus [duplicate]

Possible Duplicate: What to do if my computer is infected by a virus or a malware? I have been hit by an absolutely impossible new virus. Only in the past 3 months or so the internet has ...
0
votes
1answer
32 views

Strange localization problem

I spent several months in a foreign country (Ukraine). Now, many websites that I visit (at least the ones that support it) default to Russian. I'm worried that I might have some type of malware on ...
0
votes
4answers
5k views

High memory usage on Windows 7 unable to open browser

I switched on my laptop at 9 o’clock this morning and it is now 14:00 hours, where in after a series of reboots, hard or soft, I am able to open my browser. I opened a notepad and noted down ...
0
votes
1answer
57 views

How can I see what changes malware made to a virtual machine?

I want to know if I can open a virtual machine (VMware , Virtual Box ...) and (for example) install windows 7 + some programs (chrome,Word,antivirus....) and then save the current stat (i don't have ...
0
votes
1answer
175 views

Random audio ads [duplicate]

Audio ads appear at random and last for around 5-10 seconds before turning off. I've run spy-bot on my entire system and still ads appear. No recent program installations are appearing either. Any ...
0
votes
1answer
162 views

Why does this program give a Windows 8 SmartScreen warning?

Why does this program http://creativeadept.com/download-spintax-editor/ give me a SmartScreen warning in Windows 8 when a Malwarebytes scan and Windows Defender scan found nothing? What is wrong ...
0
votes
1answer
76 views

Catching malware and demonstrate it through windows logs

I need to catch a virus/malware on purpose on a VM and demonstrate the infection through windows logs analysis. I am using both syslog and eventlog analyzer, but no sign of events logged. I caught on ...
0
votes
1answer
38 views

How to determine if / ensure that a second-hand storage device is safe to use?

I am going to buy a SSD from someone who works in the same company, but even so is a complete stranger to me. Maybe I am a little paranoid, but is there a way to check if it is safe to use? Or is ...
0
votes
0answers
33 views

Unable to send email error message in Yahoo webmail client: suspicious of fraud

When I was trying to send an email using Yahoo webmail client opened in Chrome, I kept getting a small rectangular box with a red border containing the error message "Unable to send email" beneath the ...
0
votes
0answers
54 views

Cuckoo Sandbox Sample Reports

I am trying to find some Cuckoo Sandbox sample output reports.. I started with malwr.com, the problem is that I can't scrape the website because I can't it uses javascript to fill in the parts I want ...
0
votes
0answers
34 views

How to prevent sotware installation in Windows10 w/o asking machine password

Recently I upgraded to Windows10 and my brother did some downloading of books which brought some malwares too like mystarsearch engine, AnyProtect etc... Even after un-installing from Contol Panel it ...
0
votes
0answers
37 views

Can IDA pro detect packing/unpacking in Windows?

I am going to purchase IDA pro SDK for my research on botnet detection. Beside system calls I need to monitor packing and unpacking of new botnets. Does IDA pro detect packing/unpacking in Windows?
0
votes
0answers
176 views

how to detect and eliminate suspicious activity on the computer

I have a particularly weird problem on my Windows 7 desktop pc running on an Intel CPU with a Gigabyte motherboard and CorsAir smps. Here are a few observations which might be connected to the bigger ...
0
votes
0answers
44 views

How does one know a DLL is actually safe to use?

I've downloaded a certain DLL from the web and then uploaded it to Jotti's virus scan. All of those engines reported Found nothing. Nothing. Can there still be some sort of security issue with this ...
0
votes
0answers
71 views

4GB temporary system files showing up on desktop for no understandable reason

There are 4GB temporary system files called "BITEA#.tmp" e.g. BITEA5.tmp showing up on my Desktop folder just this last week. Does anyone know if this may be caused by malware recording screen or ...
0
votes
1answer
249 views

How do I scan Firefox on Ubuntu Linux for malicious JavaScripts?

I run Ubuntu Linux in a VirtualBox VM. I was browsing using Firefox, and I always use Adblock Plus with default configuration (EasyList) and NoScript. Then my VM lagged(mouse badly out of sync with ...
0
votes
0answers
1k views

Security Essentials (SE) hangs while scanning ProgramData folder

First I did a complete scan on C:\ and kept getting (after about 1.5M files scanned, which is at the end of the C:\ProgramData folder or the beginning of the C:\Recovery folder) Then, after ...
0
votes
1answer
129 views

How to detect unwanted Firefox add-ons?

I have a Firefox add-on that seems to inject ads on the top of the pages when I'm using search engines. For example, for a search on hard drive on Google.com, I have this banner on top: You may ...
-1
votes
1answer
4k views

Why my website giving “The site ahead contains harmful programs” error? [closed]

My site is: hints.steptoinstall.com. It's build using Wordpress. My lastest Post is: PHP – Current Year for Copyright, after making this post for the last 5 days I'm getting The site ahead contains ...
-2
votes
1answer
40 views

Post-Infection Analysis of Suspected Keylogger

I've recently downloaded and ran a file, which I now suspect might be a keylogger. I am wondering how can I tell if this file is a keylogger? I can provide a link to the file if anyone would be able ...