Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

learn more… | top users | synonyms

1
vote
1answer
62 views

Ghost USB drives don't go away on Windows 10

Briefly, I have phantom USB drives that showed up a week ago. Rolling back to a "clean" backup that was stored on a disconnected disk didn't solve the problem. I had that previously when I had a major ...
331
votes
18answers
259k views

How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

What should I do if my Windows computer seems to be infected with a virus or malware? What are the symptoms of an infection? What should I do after noticing an infection? What can I do to get rid of ...
0
votes
1answer
1k views

How to install security updates after “Upgrade to Windows 10” hijacks Windows Update? [duplicate]

EDIT: Future visitors - the cited duplicate is not a duplicate. Ignore Ramhound's (and other's) claims. This is not a question about removing Get Windows 10 malware because it keeps returning. ...
0
votes
1answer
3k views

How to get rid of Mackeeper.zerobit pop-up from Safari

Whenever I open any link or search for anything that has the word Mac, Computer, Keeper, etc. A new tab opens with an advertisement for MacKeeper. The website is called ...
0
votes
1answer
16 views

Does anybody know how to uninstall a malicious chrome addon called websecurity?

Does anybody know how to uninstall a chrome addon called websecurity? One day it randomly appeared in chrome. It says it was installed by an enterprise policy. I have tried searching for its extension ...
1
vote
3answers
3k views

How to remove SelectionLinks extension from Chrome on Windows?

It's not possible to remove it using the standard extension disablement/removal features in Chrome - the checkbox is disabled. I also found that the extension gets installed under ...
-2
votes
0answers
21 views

Facebook malware attack & said to use eset scanner I try 50 times

Your Computer Needs to Be Cleaned It looks like your computer is being affected by malware. We’ll help you fix the problem to keep your account secure and prevent malware from spreading to ...
6
votes
3answers
11k views

Harddrive - wipe out “hidden areas” like HPA and DCO also after malware infection

Background - Malware in windows (yes), possibly rootkit/bootkit. Don't want to take any chances. So, wiped drive with DBAN foolishly (PRNG, 8 pass). Later came to know that DBAN does not kill HPA ...
5
votes
7answers
8k views

Rock-solid hardening of a Windows 7 system?

I am historically a Linux guy, and only use Windows when I absolutely have to via VM. However, I recently purchased a new rig so that I can keep a dedicated Windows 7 machine up for hard work ...
0
votes
1answer
45 views

Firefox strange connection established, what is this?

I have accidentally found inside Firefox process properties (using Process Explorer) a weird connection in tcp/ip tab: bandicam.com:some_ports it points at localhost 127.0.0.1:some_ports bandicam ...
25
votes
1answer
15k views

Why do I have two desktop.ini files on my windows 8 desktop?

When I try to delete one of these two shortcuts, a message appears saying, "If you remove this file, Windows or another program may no longer work correctly."! I don't think that it is possible to ...
-1
votes
0answers
29 views

Windows Server Backup dedicated HDD and “locky” kind of malware - are the backed-up data protected?

I have recently set up a Windows Server Backup for one of my servers in the "Back up to a hard disk that is dedicated for backups" mode. In this mode, the whole drive is not normally visible in the ...
0
votes
0answers
27 views

Is it possible that I got a virus without clicking what I downloaded? [duplicate]

A couple of days ago I accidentally downloaded a file that looked very shady. My antivirus (Avira) pinged me that the file was suspicious, so I immediately deleted it, and then cleared my browsers ...
0
votes
1answer
29 views

How credible is company/publisher and its version information of DLL or EXE?

This Stackoverflow question shows how to modify version information in some classes of binary files, like DLLs. I often rely on the version information as one metric (amongst many) for peace of mind ...
-2
votes
0answers
26 views

I'm connected to unwanted Ip's derivated from chinese tencent virus. Want to remove them ASAP

I got a virus a couple of days ago and went through a good cleaning process in order to get rid of all that. I used MwB to do most of the work, then proceeded to eliminate the remaining files. I ...
1
vote
1answer
35 views

How does the locky malware work?

I've been hearing a lot about the locky malware recently. I've heard that it can be deployed through Word macros. I'd like to know how the malware can do it's thing without needing administrator ...
3
votes
1answer
99 views

Can an incorrect program size indicate malware?

Example File Sizes from "Programs and Features": Windows is reporting vastly incorrect file sizes. In the example given, Python 3.4.1 is listed as taking 30 GB of space. This isn't the only program ...
0
votes
0answers
7 views

File Segment Unreadable Error After Upgrade/Malware Restart

I tried upgrading from Windows 7 to Windows 10 but the upgrade tool MediaCreation seemed to be held up when initiating the restart, so I cancelled the installation. Before I initiated the install ...
1
vote
3answers
601 views

How to remove Amazon Assistant that was installed by Java installer?

I recently did a clean install of Java about a week or two ago. It asked whether I wanted the Amazon button app installed. I opted NO. It still installed anyway. I removed it from Control Panel -> ...
0
votes
0answers
39 views

Remove ads malware from Chrome

A malware smuggled its way into my chrome. It ads ad JS snippet into footer, before tag: However, what's peculiar is that I found that it only injects itself into one website: ...
3
votes
0answers
78 views

Is this a ransomware?

I just got this window on my main computer: Apparently, it's from Windows. I checked, the process EXE file is the original one (efsui.exe or something like that). But the thing is, I don't use EFS ...
0
votes
1answer
45 views

How can a malware site take control of Chrome?

I've had quite a scare today - the second time this month. I tried browsing to speedtest.net to test my connection, and I must have mistyped something (the last time that happened, I mistyped ...
1
vote
1answer
47 views

Cerber - why were some files not encrpted?

I was hit by Cerber on the weekend. This surprised me given I was running Grindsoft Anti-Malware in addition to Defender, although I suspect Grindsoft real-time protection was off given there had ...
3
votes
1answer
66 views

Is my router infected? DNS settings affected

I see that when I browse on my mobile devices (phones, tablets) in my network, the browser gets redirected to malware/adware that says my device is damaged and I should repair it, install some ...
0
votes
0answers
12 views

How to remove hidden folder shortcut malware [duplicate]

How to remove the virus/worm which creates a shortcut that runs a payload whose name is randomly generated. It puts the current content under a hidden folder. And displays the boobytrapped shortcut ...
1
vote
1answer
3k views

“ad-type-google.com…”, “tradeadexchange.com” malware redirection in mobile

Whenever I use internet from my home network on my mobile, and open any site, (except Facebook, Yahoo and Youtube), the doesn't load and it redirects to the pages malware pages mentioned in the title. ...
0
votes
0answers
23 views

more problems post malware scan and defrag than before

ok so, the little hiccups my PC has been having have turned into a full on dry heave. the issues i used to have were as follows: I have windows 7 and for some reason it keeps telling me to shut down ...
-3
votes
3answers
135 views

Received a .vbs on Skype and ran it

I received a .vbs file on Skype and ran it.. Please let me know if it does anything? the code contained
0
votes
2answers
151 views

How did GWX install itself when it was denied permission?

This is related to How does one Blacklist a patch based on Knowledge Based/KB number? and How to add a Deny ACE for TrustedInstaller?. The Get Windows X malware has returned (again) on two Windows 7 ...
0
votes
2answers
99 views

Can Virtual Box/VMware infect the host PC when testing Cryptolocker?

Can cryptolocker encrypt the host PC if I test it on a Virtual Machine? Currently I am using 'NAT' as my network type or whatever...
1
vote
6answers
3k views

USB drive gets infected every time I plug it into my laptop

Whenever I plug in my USB flash drive into my laptop running Windows XP, an AutoRun.inf file gets created inside it. Also a hidden folder called "Cache" which uses the Recycle bin icon gets created. ...
3
votes
2answers
47 views

Hidden Files: Odd large system files taking up space on hard drive

In the above image there are four large files with names composed of what appear to be random (non-Roman) Unicode characters. I have no idea where they came from. Is anyone familiar with these? Do I ...
10
votes
5answers
536 views

Preventing malware from sniffing the sudo password

I often hear people citing sudo as one of the main barriers to malware infecting a Linux computer. The most commen argument seems to go along the lines of: Root privileges are required to modify ...
1
vote
2answers
135 views

Active Adblock Plus shows weird error in Chrome JS Console

Every page i browse with chrome shows this error in the console: extensions::uncaught_exception_handler:8 Error in event handler for (unknown): SyntaxError: Failed to execute 'insertRule' on ...
1
vote
1answer
95 views

Weird-looking Registry entry under HKCU\Software\Classes (is it a virus)?

I wanted to set Photoshop as my default image viewer (need a workaround because Windows doesn't recognize it), so I have to edit my Registry. In the tutorial on the official Adobe website, they say to ...
4
votes
1answer
156 views

How to remove cryptowall encryption

Please help me urgently, Because My all files are encrypted by unknown virus named, 'CryptoWall encryption'. I attached one screenshot, which is provided by this virus.
-3
votes
3answers
340 views

How can malware affect a router?

I had a problem with my router (in the question Same popup on my devices, is there a malware? I wasn't able to reply) it was infected with malware.I checked the problem by changing the router and the ...
1
vote
2answers
51 views

Why are my router's DNS settings changing?

I'm using d-link 2600U router (updated to latest firmware). My router's DNS setting keep changing and my browser redirects to adult websites and fake ads. I scanned my computer with this softwares: - ...
-3
votes
2answers
47 views

Youtube link gave me a virus?

I was watching a Youtube video, and I then clicked on a "View all replies" link under a comment. I tried this again 2 times, and none of the clicks had worked. Immediately afterwards, three console ...
1
vote
1answer
450 views

Can I delete the AI_RecycleBin folder?

I'm trying to clear out some space on my SDD and I have this folder in C: (where windows is installed) that takes up 12.2 GB of space and is called AI_RecycleBin. I've tried to search for this folder ...
0
votes
1answer
33 views

Malware Allowing Remote Access to my Machine

I would like to understand how Malware allows a remote connection to my machine. Am I correct in thinking that my modem / router will block all inbound connections from the internet? A scan has shown ...
0
votes
0answers
19 views

How to track what's creating a temp file? [duplicate]

On every bootup, a file named gxxx.tmp.exe is created in %temp% and the name changes every time. How do I find what's creating this? Here is the file ...
1
vote
2answers
36 views

Can Malware infect a machine with UAC enabled and not elevating a process

Is it possible for Malware to infect a machine (i.e. not just a user account) running in a standard user account when UAC is enabled, if the process is not elevated? I ask because I want to know how ...
4
votes
2answers
50 views

Please suggest some safety measures for analysing viruses on my pendrive

My pendrive have been infected by virus and my antivirus fails to detect it. Several folders on my pendrive have been hidden and the virus has spread all over my computer. I see many strange changes ...
0
votes
1answer
5k views

Disable chrome auto refresh bug

When chrome starts, whenever I open a new tab and start surfing, the tab in which I have the focus gets refreshed to Google.com. Every time I change, after 1 or 2 secs it gets back to Google.com. When ...
0
votes
1answer
93 views

High Risk Desktop Configuration

I'm a part time activist. (nothing I do is illegal in any democratic country) I receive files that could potentially include zero day exploits. The machine is a laptop. I keep very regular backups so ...
3
votes
2answers
74 views

How do I stop this active malware alerted by Avast?

I am not knowledgeable on how to find adware/malware beyond scanning for it with whatever protection software I have. I avoid suspicious websites and often get popups from Avast if a page is infected ...
-5
votes
1answer
45 views

why Ransomware malware payment message not encrypted also?

it is an awkward question but just want to know why the payment message not encrypted or corrupted or any error seems to happen when pop-up? and what type of this message is it an excutable extension ...
0
votes
0answers
15 views

Protect debian from a typical dropper (malware)?

I have a Debian box that I have pretty secure. Browsers are rarely used, except lynx which is used almost exclusively to download specific files. The daemon servers running on the machine are just a ...
3
votes
4answers
25k views

How do I completely remove Wondershare Allmytube from Windows [using Farbar Recovery Scan Tool]?

Windows 7 Enterprise x64 So I made a mistake and ran a dubious executable program downloaded from the internet. I was making a dvd and I didn't know how to download videos from funnyordie.com, so I ...