Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

learn more… | top users | synonyms

0
votes
2answers
28 views

Data encrypted by LOCKY virus [duplicate]

Is there any way to decrypt the data which is affected and encrypted by locky ransomeware hackers. one of our companies system (windows 7) is affected. i have Ubuntu installed on my PC. please help ...
-1
votes
0answers
28 views

How to remove indeed.com malware? [duplicate]

Since a few days I have some adware on my browser (you know, just like extra toolbars or a starting page). I get this sidebar from indeed.com on multiple websites (stackoverflow too for example): ...
0
votes
1answer
45 views

pseudohydrophobia process Mac

Recently I started noticing when I browse a web page in my MBP 10.10.5 Yosemite that Chrome Canary Version 53 was opening a new tab or some pages were not opening...this tab was redirecting me to ...
3
votes
4answers
28k views

How do I completely remove Wondershare Allmytube from Windows [using Farbar Recovery Scan Tool]?

Windows 7 Enterprise x64 So I made a mistake and ran a dubious executable program downloaded from the internet. I was making a dvd and I didn't know how to download videos from funnyordie.com, so I ...
0
votes
1answer
3k views

How to get rid of Mackeeper.zerobit pop-up from Safari

Whenever I open any link or search for anything that has the word Mac, Computer, Keeper, etc. A new tab opens with an advertisement for MacKeeper. The website is called http://mackeeperapp.zeobit....
0
votes
1answer
20 views

A malware in Mozilla, An URL opens automatically?

Some times when I open a site in Mozilla, a URL that starts with vadabzauefrpph4xraz8ewblhsbsbxkfq7sx8d9me4nuemgnx2yt5cnyfzzlxek.com will replace with the site's URL, What should I do to solve this ...
1
vote
1answer
143 views

Where do I find the Cerber executable and Registry entries?

A server I am administrating has been infected by a ransomware named Cerber. They demand a payment (as is the point of such viruses). As of now I have narrowed the infection source down and removed ...
0
votes
1answer
35 views

Recovering files from a computer attacked by a malware or virus that encrypts all of my files

My computer (running Windows 8.1) was infected by a malware or virus yesterday. Now all of my files are encrypted such as music, videos, documents… Now I want to recover all of my files.
-1
votes
0answers
20 views

Recover php files after virus infection

I have a laravel project (which is very important) and after a virus infection all I can see when I open my files with the editor(sublimetext) is: 5972 b63c 227b a9ce b572 d734 d2b8 c534 b989 7d73 ...
0
votes
0answers
37 views

What is this possible malware or virus bar that keeps saying “Upgrade to premium”?

What is this "Upgrade to premium" that appear every once in a while while I'm browsing, it has shown up on multiple sites. Is it something on my browser or on my mac? I'm using a macbook pro with OS ...
0
votes
1answer
36 views

How does a botnet client gain access to the user's username and password?

How does a botnet client gain access to the user's username and password? I assume it must then send these details as well as the user's IP address to the CnC server. Does it use some kind of ...
0
votes
2answers
66 views

Google Chrome malware

For some time, I've had malware in Chrome. This malware does two things: Whenever click on the Extensions settings from Settings, instead of opening the list of extensions, the tab disappears. It ...
5
votes
1answer
5k views

google.com/search redirects to google.com/webhp but only sometimes

According to the Internet, when google.com/search redirects to google.com/webhp, it means Search Conduit has hijacked the browser. In my case, this is what happens: https://www.google.com/search?ie=...
1
vote
3answers
3k views

How to remove SelectionLinks extension from Chrome on Windows?

It's not possible to remove it using the standard extension disablement/removal features in Chrome - the checkbox is disabled. I also found that the extension gets installed under C:\Users\\AppData\...
0
votes
2answers
91 views

The password on my mac (yosemite) is being changed everytime I logout

When I reset my macbook pro, the password gets changed. I have Yosemite 10.10.3 and Apple phone support haven't been able to get to the bottom of it yet. They suggested I re-install the OS but i'd ...
-1
votes
0answers
42 views

Unknown history in my browser

I have recently found some weird research on my browser(also some nsfw) The first search is on a website wich is sharing various webcam streams like daily streams and stuff like that, this research ...
338
votes
18answers
262k views

How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

What should I do if my Windows computer seems to be infected with a virus or malware? What are the symptoms of an infection? What should I do after noticing an infection? What can I do to get rid of ...
0
votes
0answers
17 views

hdparm -N /dev/sda fails

Progression of events; Made a bootable Ubuntu 16.04 LTS USB key. Booted said key. Selected try Ubuntu without installing. Opened a terminal window. Typed hdparm -N /dev/sda Output was: /dev/sda: ...
-1
votes
3answers
66 views

Accessing a malicious website through virtual machine

I want to watch a series of episodes on a website that I found on the internet which happened to be malicious. Unfortunately, I couldn't find different websites that provide those episodes. For my ...
0
votes
1answer
43 views

C:\Windows\SysWOW64\Rundll32.exe process eating all my resources

I have the process as mentioned in the question using nearly all my resources, both processing and memory, even though I have nothing else running. When I end the process, it seems to just start ...
1
vote
2answers
246 views

unwanted chinese/korean program installed unable to remove it from any where

members some unknown Chinese program has uninstalled in my system I have tried many antivirus and malware removal programs without any clue as what this program is. Finally I am posting a screenshot ...
0
votes
2answers
26 views

I am unable to remove browser hijacker

I have noticed many times after few weeks my browser's search engine gets changed to some conduict search engine. But today i found a reason I found some suspicious third party software and when i ...
3
votes
2answers
522 views

nslookup returning fake results for one particular domain

I've just noticed some very strange and concerning results when I attempted to do an nslookup for a one of my domain names from one of my hosted virtual servers. The domain [mydomain].info is ...
9
votes
9answers
8k views

UAC being turned off once a day on Windows 7

I have strange problem on my HP laptop. This began to happen recently. Whenever I start my machine, Windows 7 Action Center displays the following warning: You need to restart your computer for ...
-2
votes
0answers
13 views

Unable to access ADSL modem settings and to ping my default gateway

I have small home network consisting of few devices. I used to have problems with redirecting malware on my Wi-Fi modem. After some effort the problem with malware seems to disappear. However, now I ...
1
vote
1answer
74 views

Ghost USB drives don't go away on Windows 10

Briefly, I have phantom USB drives that showed up a week ago. Rolling back to a "clean" backup that was stored on a disconnected disk didn't solve the problem. I had that previously when I had a major ...
0
votes
1answer
1k views

How to install security updates after “Upgrade to Windows 10” hijacks Windows Update? [duplicate]

EDIT: Future visitors - the cited duplicate is not a duplicate. Ignore Ramhound's (and other's) claims. This is not a question about removing Get Windows 10 malware because it keeps returning. Instead,...
0
votes
1answer
22 views

Does anybody know how to uninstall a malicious chrome addon called websecurity?

Does anybody know how to uninstall a chrome addon called websecurity? One day it randomly appeared in chrome. It says it was installed by an enterprise policy. I have tried searching for its extension ...
7
votes
3answers
11k views

Harddrive - wipe out “hidden areas” like HPA and DCO also after malware infection

Background - Malware in windows (yes), possibly rootkit/bootkit. Don't want to take any chances. So, wiped drive with DBAN foolishly (PRNG, 8 pass). Later came to know that DBAN does not kill HPA (...
5
votes
7answers
8k views

Rock-solid hardening of a Windows 7 system?

I am historically a Linux guy, and only use Windows when I absolutely have to via VM. However, I recently purchased a new rig so that I can keep a dedicated Windows 7 machine up for hard work (cough,...
0
votes
1answer
48 views

Firefox strange connection established, what is this?

I have accidentally found inside Firefox process properties (using Process Explorer) a weird connection in tcp/ip tab: bandicam.com:some_ports it points at localhost 127.0.0.1:some_ports bandicam ...
26
votes
1answer
15k views

Why do I have two desktop.ini files on my windows 8 desktop?

When I try to delete one of these two shortcuts, a message appears saying, "If you remove this file, Windows or another program may no longer work correctly."! I don't think that it is possible to ...
0
votes
0answers
27 views

Is it possible that I got a virus without clicking what I downloaded? [duplicate]

A couple of days ago I accidentally downloaded a file that looked very shady. My antivirus (Avira) pinged me that the file was suspicious, so I immediately deleted it, and then cleared my browsers ...
0
votes
1answer
31 views

How credible is company/publisher and its version information of DLL or EXE?

This Stackoverflow question shows how to modify version information in some classes of binary files, like DLLs. I often rely on the version information as one metric (amongst many) for peace of mind ...
1
vote
1answer
38 views

How does the locky malware work?

I've been hearing a lot about the locky malware recently. I've heard that it can be deployed through Word macros. I'd like to know how the malware can do it's thing without needing administrator ...
3
votes
1answer
113 views

Can an incorrect program size indicate malware?

Example File Sizes from "Programs and Features": Windows is reporting vastly incorrect file sizes. In the example given, Python 3.4.1 is listed as taking 30 GB of space. This isn't the only program ...
0
votes
0answers
7 views

File Segment Unreadable Error After Upgrade/Malware Restart

I tried upgrading from Windows 7 to Windows 10 but the upgrade tool MediaCreation seemed to be held up when initiating the restart, so I cancelled the installation. Before I initiated the install ...
1
vote
3answers
766 views

How to remove Amazon Assistant that was installed by Java installer?

I recently did a clean install of Java about a week or two ago. It asked whether I wanted the Amazon button app installed. I opted NO. It still installed anyway. I removed it from Control Panel -> ...
0
votes
0answers
44 views

Remove ads malware from Chrome

A malware smuggled its way into my chrome. It ads ad JS snippet into footer, before tag: However, what's peculiar is that I found that it only injects itself into one website: http://www.fabrika....
3
votes
0answers
81 views

Is this a ransomware?

I just got this window on my main computer: Apparently, it's from Windows. I checked, the process EXE file is the original one (efsui.exe or something like that). But the thing is, I don't use EFS (...
0
votes
1answer
46 views

How can a malware site take control of Chrome?

I've had quite a scare today - the second time this month. I tried browsing to speedtest.net to test my connection, and I must have mistyped something (the last time that happened, I mistyped "google")...
2
votes
1answer
62 views

Cerber - why were some files not encrpted?

I was hit by Cerber on the weekend. This surprised me given I was running Grindsoft Anti-Malware in addition to Defender, although I suspect Grindsoft real-time protection was off given there had ...
3
votes
1answer
76 views

Is my router infected? DNS settings affected

I see that when I browse on my mobile devices (phones, tablets) in my network, the browser gets redirected to malware/adware that says my device is damaged and I should repair it, install some ...
0
votes
0answers
12 views

How to remove hidden folder shortcut malware [duplicate]

How to remove the virus/worm which creates a shortcut that runs a payload whose name is randomly generated. It puts the current content under a hidden folder. And displays the boobytrapped shortcut ...
1
vote
1answer
3k views

“ad-type-google.com…”, “tradeadexchange.com” malware redirection in mobile

Whenever I use internet from my home network on my mobile, and open any site, (except Facebook, Yahoo and Youtube), the doesn't load and it redirects to the pages malware pages mentioned in the title. ...
0
votes
0answers
23 views

more problems post malware scan and defrag than before

ok so, the little hiccups my PC has been having have turned into a full on dry heave. the issues i used to have were as follows: I have windows 7 and for some reason it keeps telling me to shut down ...
-3
votes
3answers
143 views

Received a .vbs on Skype and ran it

I received a .vbs file on Skype and ran it.. Please let me know if it does anything? the code contained
1
vote
2answers
157 views

How did GWX install itself when it was denied permission?

This is related to How does one Blacklist a patch based on Knowledge Based/KB number? and How to add a Deny ACE for TrustedInstaller?. The Get Windows X malware has returned (again) on two Windows 7 ...
0
votes
2answers
112 views

Can Virtual Box/VMware infect the host PC when testing Cryptolocker?

Can cryptolocker encrypt the host PC if I test it on a Virtual Machine? Currently I am using 'NAT' as my network type or whatever...
1
vote
6answers
3k views

USB drive gets infected every time I plug it into my laptop

Whenever I plug in my USB flash drive into my laptop running Windows XP, an AutoRun.inf file gets created inside it. Also a hidden folder called "Cache" which uses the Recycle bin icon gets created. ...