Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

learn more… | top users | synonyms

1
vote
3answers
3k views

How to remove SelectionLinks extension from Chrome on Windows?

It's not possible to remove it using the standard extension disablement/removal features in Chrome - the checkbox is disabled. I also found that the extension gets installed under C:\Users\\AppData\...
0
votes
2answers
27 views

Malware from TPB(piratebay) infected my pc. I need to transfer my data into external hdd before wiping my hard drive

OS: Windows (Primary), Ubuntu (secondary). Few days back I was using TPB(piratebay) obviously for educational purposes,even though I have ad-blocker at the time of browsing some advertisement did pop-...
0
votes
1answer
79 views

Microsoft Edge start page is hijacked and can't be changed

I've installed something that kindly added thesearch.net as a default homepage and search to all of my browsers on Windows 10. I've managed to remove it from all of my browsers except one: Microsoft ...
-1
votes
1answer
26 views

Can zip files be used to infect an Android device with malware

I received a virus infected zip file and in a moment of insanity (I had just woken up) opened it in Root Explorer (my phone is rooted). I know it is infected because a) Avast detected it on my PC and ...
0
votes
4answers
169 views

Malware: how to remove annoying extra argument when Firefox & Chrome processes start

I am in the midst of a malware cleanup, as a result of making the rookie mistake of trying out an .exe file from an unreliable source. Anyway, the malware seemingly turned out to be some sort of ...
0
votes
1answer
44 views

Two winlogon.exe process - Do I have malware

Recently I started to use sysinternals tools. I recevied acomputer that I was told that as malware. I can't spot anything suspicion exept one thing: I opened process explorer and saw that there are 2 ...
1
vote
1answer
29 views

What does “unified” windows 10 mean for malware/vulnerabilities?

If I understand the new windows 10 "unified" approach correctly, Microsoft is trying to use the same underlying layer for all windows 10 versions (desktop, tablet, phone, ...) so that the app store ...
-1
votes
0answers
24 views

Browser redirected via malware [duplicate]

I know this may seem lazy to post a question like this here but I've tried everything and getting a bit desperate. Lately my Internet Browser (Chrome) has been redirecting me to random advertisment ...
9
votes
9answers
8k views

UAC being turned off once a day on Windows 7

I have strange problem on my HP laptop. This began to happen recently. Whenever I start my machine, Windows 7 Action Center displays the following warning: You need to restart your computer for ...
6
votes
2answers
3k views

What exactly is Java's new helper tool? Updating from Java 8 update 60 to Java update 71 on a Mac

I've looked around online and can't seem to find that much information of what Java's new helper tool is. I've found another thread here on SE but it doesn't explain that much. Is it something that ...
117
votes
5answers
18k views

Why does anti-virus software not delete the viruses, malware, etc., but instead quarantine them?

Why does anti-virus software not completely delete the viruses, malware, etc., but instead quarantine them? Is it not better to completely get rid of them? Why? And how can I manually remove them?
0
votes
0answers
20 views

File analysis for potential malware in a fresh VM?

If I wanted to find out if a file is truly a virus, and not just a false positive, I'd imagine I would need to run the file in a fresh windows VM and track all changes made to the entire OS post-...
-2
votes
3answers
88 views

unlock cmd.exe, hijacked by malware [closed]

Re-edit the question Jul 5/2015: A malware (winlogon fake process) lock cmd.exe, regedit.exe, taskmgr.exe, msconfig.exe, taskkill.exe, tasklist.exe, wscript.exe, taskmgr.exe, taskmon.exe, system ...
-1
votes
0answers
30 views

Some computers running very slow and when restarted the OS doesn't load

In my company the last two days were a chaos. 4 computers of our team had the same problem, exactly the same problem: All of them begin to being slow, very very slow, and when the owners restarted ...
8
votes
5answers
7k views

Download Virus/Malware Purposefully

Where can I download a virus, work, trojan, etc. for analysis? Yes, I'm actually hunting for malware, rather than keeping it at bay and hiding behind antivirus software and firewalls. I plan to ...
0
votes
0answers
82 views

I got a strange banner on Chrome asking me to “update my account”. Is it legitimate, or is it some sort of malware?

tl;dnr: A vaguely written banner appeared while I was searching on Google (description in 1st paragraph), asking me to update my account, and not much more, which didn't seem right. What is it, is ...
0
votes
1answer
39 views

Is “hstart.exe” harmful to my computer?

Today, Malwarebytes Anti-malware notified me that it had quarantined a malware, right after I logged in. It looked like this: But, when I searched the file, hstart.exe, I didn't get a definitive ...
0
votes
1answer
67 views

Haven't found DNS Unlocker in the Task Manager. Where could it be?

This morning I found DNS Unlocker on my workstation, and since then I am trying to remove it. I guess, I visit some wrong website yesterday during the lunchtime. I really need help with this. There’s ...
0
votes
0answers
28 views

My audio and video drivers are not working, planning on factory reset, is this the appropriate solution? [duplicate]

I recently downloaded a packaged application, accidentally installing a dozen unwanted programs. They are literally causing pop ups to randomly happen and it seems that over half of the unwanted ...
0
votes
2answers
71 views

Data encrypted by LOCKY virus [duplicate]

Is there any way to decrypt the data which is affected and encrypted by locky ransomeware hackers. one of our companies system (windows 7) is affected. i have Ubuntu installed on my PC. please help ...
-1
votes
0answers
28 views

How to remove indeed.com malware? [duplicate]

Since a few days I have some adware on my browser (you know, just like extra toolbars or a starting page). I get this sidebar from indeed.com on multiple websites (stackoverflow too for example): ...
0
votes
1answer
48 views

pseudohydrophobia process Mac

Recently I started noticing when I browse a web page in my MBP 10.10.5 Yosemite that Chrome Canary Version 53 was opening a new tab or some pages were not opening...this tab was redirecting me to ...
3
votes
4answers
31k views

How do I completely remove Wondershare Allmytube from Windows [using Farbar Recovery Scan Tool]?

Windows 7 Enterprise x64 So I made a mistake and ran a dubious executable program downloaded from the internet. I was making a dvd and I didn't know how to download videos from funnyordie.com, so I ...
0
votes
1answer
3k views

How to get rid of Mackeeper.zerobit pop-up from Safari

Whenever I open any link or search for anything that has the word Mac, Computer, Keeper, etc. A new tab opens with an advertisement for MacKeeper. The website is called http://mackeeperapp.zeobit....
0
votes
1answer
36 views

A malware in Mozilla, An URL opens automatically? [duplicate]

Some times when I open a site in Mozilla, a URL that starts with vadabzauefrpph4xraz8ewblhsbsbxkfq7sx8d9me4nuemgnx2yt5cnyfzzlxek.com will replace with the site's URL, What should I do to solve this ...
1
vote
1answer
183 views

Where do I find the Cerber executable and Registry entries?

A server I am administrating has been infected by a ransomware named Cerber. They demand a payment (as is the point of such viruses). As of now I have narrowed the infection source down and removed ...
0
votes
1answer
36 views

Recovering files from a computer attacked by a malware or virus that encrypts all of my files

My computer (running Windows 8.1) was infected by a malware or virus yesterday. Now all of my files are encrypted such as music, videos, documents… Now I want to recover all of my files.
0
votes
0answers
37 views

What is this possible malware or virus bar that keeps saying “Upgrade to premium”?

What is this "Upgrade to premium" that appear every once in a while while I'm browsing, it has shown up on multiple sites. Is it something on my browser or on my mac? I'm using a macbook pro with OS ...
0
votes
1answer
37 views

How does a botnet client gain access to the user's username and password?

How does a botnet client gain access to the user's username and password? I assume it must then send these details as well as the user's IP address to the CnC server. Does it use some kind of ...
0
votes
2answers
66 views

Google Chrome malware

For some time, I've had malware in Chrome. This malware does two things: Whenever click on the Extensions settings from Settings, instead of opening the list of extensions, the tab disappears. It ...
5
votes
1answer
5k views

google.com/search redirects to google.com/webhp but only sometimes

According to the Internet, when google.com/search redirects to google.com/webhp, it means Search Conduit has hijacked the browser. In my case, this is what happens: https://www.google.com/search?ie=...
0
votes
2answers
92 views

The password on my mac (yosemite) is being changed everytime I logout

When I reset my macbook pro, the password gets changed. I have Yosemite 10.10.3 and Apple phone support haven't been able to get to the bottom of it yet. They suggested I re-install the OS but i'd ...
343
votes
18answers
265k views

How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

What should I do if my Windows computer seems to be infected with a virus or malware? What are the symptoms of an infection? What should I do after noticing an infection? What can I do to get rid of ...
0
votes
0answers
34 views

hdparm -N /dev/sda fails

Progression of events; Made a bootable Ubuntu 16.04 LTS USB key. Booted said key. Selected try Ubuntu without installing. Opened a terminal window. Typed hdparm -N /dev/sda Output was: /dev/sda: ...
-1
votes
3answers
77 views

Accessing a malicious website through virtual machine

I want to watch a series of episodes on a website that I found on the internet which happened to be malicious. Unfortunately, I couldn't find different websites that provide those episodes. For my ...
0
votes
1answer
52 views

C:\Windows\SysWOW64\Rundll32.exe process eating all my resources

I have the process as mentioned in the question using nearly all my resources, both processing and memory, even though I have nothing else running. When I end the process, it seems to just start ...
1
vote
2answers
303 views

unwanted chinese/korean program installed unable to remove it from any where

members some unknown Chinese program has uninstalled in my system I have tried many antivirus and malware removal programs without any clue as what this program is. Finally I am posting a screenshot ...
0
votes
2answers
28 views

I am unable to remove browser hijacker

I have noticed many times after few weeks my browser's search engine gets changed to some conduict search engine. But today i found a reason I found some suspicious third party software and when i ...
3
votes
2answers
536 views

nslookup returning fake results for one particular domain

I've just noticed some very strange and concerning results when I attempted to do an nslookup for a one of my domain names from one of my hosted virtual servers. The domain [mydomain].info is ...
1
vote
1answer
94 views

Ghost USB drives don't go away on Windows 10

Briefly, I have phantom USB drives that showed up a week ago. Rolling back to a "clean" backup that was stored on a disconnected disk didn't solve the problem. I had that previously when I had a major ...
0
votes
1answer
1k views

How to install security updates after “Upgrade to Windows 10” hijacks Windows Update? [duplicate]

EDIT: Future visitors - the cited duplicate is not a duplicate. Ignore Ramhound's (and other's) claims. This is not a question about removing Get Windows 10 malware because it keeps returning. Instead,...
0
votes
1answer
22 views

Does anybody know how to uninstall a malicious chrome addon called websecurity?

Does anybody know how to uninstall a chrome addon called websecurity? One day it randomly appeared in chrome. It says it was installed by an enterprise policy. I have tried searching for its extension ...
7
votes
3answers
11k views

Harddrive - wipe out “hidden areas” like HPA and DCO also after malware infection

Background - Malware in windows (yes), possibly rootkit/bootkit. Don't want to take any chances. So, wiped drive with DBAN foolishly (PRNG, 8 pass). Later came to know that DBAN does not kill HPA (...
5
votes
7answers
8k views

Rock-solid hardening of a Windows 7 system?

I am historically a Linux guy, and only use Windows when I absolutely have to via VM. However, I recently purchased a new rig so that I can keep a dedicated Windows 7 machine up for hard work (cough,...
0
votes
1answer
50 views

Firefox strange connection established, what is this?

I have accidentally found inside Firefox process properties (using Process Explorer) a weird connection in tcp/ip tab: bandicam.com:some_ports it points at localhost 127.0.0.1:some_ports bandicam ...
26
votes
1answer
15k views

Why do I have two desktop.ini files on my windows 8 desktop?

When I try to delete one of these two shortcuts, a message appears saying, "If you remove this file, Windows or another program may no longer work correctly."! I don't think that it is possible to ...
0
votes
0answers
33 views

Is it possible that I got a virus without clicking what I downloaded? [duplicate]

A couple of days ago I accidentally downloaded a file that looked very shady. My antivirus (Avira) pinged me that the file was suspicious, so I immediately deleted it, and then cleared my browsers ...
0
votes
1answer
31 views

How credible is company/publisher and its version information of DLL or EXE?

This Stackoverflow question shows how to modify version information in some classes of binary files, like DLLs. I often rely on the version information as one metric (amongst many) for peace of mind ...
1
vote
1answer
40 views

How does the locky malware work?

I've been hearing a lot about the locky malware recently. I've heard that it can be deployed through Word macros. I'd like to know how the malware can do it's thing without needing administrator ...
3
votes
1answer
146 views

Can an incorrect program size indicate malware?

Example File Sizes from "Programs and Features": Windows is reporting vastly incorrect file sizes. In the example given, Python 3.4.1 is listed as taking 30 GB of space. This isn't the only program ...