Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

learn more… | top users | synonyms

4
votes
0answers
191 views

Files were encrypted by virus, and old (win 7) OS is gone - What Do?

So for the past few weeks I have been planning on switching from windows 7 to Ubuntu (14.04) with windows running in a VM for whenever I need it. 2 days ago my antivirus complained to me that I had a ...
3
votes
0answers
78 views

Is this a ransomware?

I just got this window on my main computer: Apparently, it's from Windows. I checked, the process EXE file is the original one (efsui.exe or something like that). But the thing is, I don't use EFS ...
3
votes
0answers
57 views

Cuckoo with pfSense

I am trying to set up Cuckoo with pfSense, and it is either not getting the information from the Cuckoo server, or it is not correctly sending the info back to the result server. I am using a LAN ...
3
votes
0answers
488 views

Suspicious NetBios Name Service traffic

A friend of mine recently complained about the very bad performance of the Internet connection over her family's LAN. Apparently the Internet connection worked normal most of the time but certain ...
2
votes
0answers
161 views

Extraneus message about security risk when I open a new Chrome tab

Today I start getting in Chrome a message saying: "I SEE YOU ARE A XXXXX CUSTOMER are you concerned that your Linux computer may have a potential security risk.... Please call toll free for ...
2
votes
0answers
185 views

Possible for malware to set a BIOS password?

Strange issue. My PC locked up and I reset it by holding down the power button. It had been overclocked and I received a message that my PC had experienced a boot failure due to voltage issues. ...
2
votes
0answers
57 views

Malware seems to disappear when brought into the shop

Question: Is there a type of malware out there that "goes stealth" when in a different environment from it's usual one (IE, when the computer is brought into the shop), and then reactivates when back ...
2
votes
0answers
458 views

CPU burning hot causing internet connection to slow down (or cut off)

I have an HP pavilion g6, 64 bit. I dualboot it, installing windows 7 and a linux distro. nowaday I'm running crunchbang linux distro. When I'm working on any linux distro, i don't remember having ...
2
votes
0answers
1k views

What does this mean and what do I do about it? crucial filesystem check: Fixing Bogus GID 80 on path /sbin/launchd

A few days ago my website got hacked and a malicious file called images.pl was uploaded which creates a backdoor that allows the file's author to upload/download/do whatever they want. Later I found ...
2
votes
0answers
89 views

Something is changing the OSX default shell to tcsh

On one of the mac machines I'm somewhat responsible for (Snow Leopard), something periodically changes the default login shell from bash to tcsh. This seems like it's probably suspicious, but not ...
1
vote
0answers
59 views

It appears that there were attempted hacking attempts on my Ubuntu and I did screenshots, is this genuine or false readings?

It appears that my computer has given false readings or under some sort of hacking attempt and I did scans and found trojan agents on my windows partition. Even after the scan I keep finding trojan ...
1
vote
0answers
899 views

IE and Chrome are requesting that I allow ect.html.gz to be downloaded for some sites

IE and Chrome are requesting that I allow ect.html.gz to be downloaded for some sites. What is this file? Is it dangerous, or is this a malfunction of IE and Chrome? The problem does not occur with ...
1
vote
0answers
189 views

Malware sandbox (Cuckoo) permission denied for pcap file

I am trying to run an analysis on Cuckoo malware sandbox but keep running into a permission error. This is what I get when I submit a file for analysis: 2015-08-16 02:27:27,477 ...
1
vote
0answers
136 views

Your-Home-Page.net on Opera?

Long story short, the link (provided below) was somehow set to open (alongside my homepage) every time I open Opera, and I can not figure out how to stop it from happening nor when it began. I have ...
1
vote
0answers
97 views

Is this malware?

I have a machine running Linux Mint (qiana). I noticed it was often slow and when I looked at top I found PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND ...
1
vote
0answers
56 views

how can i found the source of a malware that is trying to force-open a website

For the last 3 days i've been seeing this warning from Avast every 2-3 hours : I have no idea how to track this and make it stop, i scanned my computer and avast didn't find anything suspicious, the ...
1
vote
0answers
303 views

Manipulating firmware of USB flash drives

As far as you may know, about four month ago, a new malware-like program found that was infected USB device's firmwares. (Take a look here) I want to know, how it is possible to read and modify ...
1
vote
0answers
601 views

Internet Explorer runs whenever I run an exe file

I'm using Windows 7. Whenever I try to run an .exe file, Internet Explorer runs with it. How can I fix this? P.S. .exe files are working fine, but IE runs with them automatically.
1
vote
0answers
89 views

Unwanted redirects in chrome

When I type a search in chrome on OS X it automatically does another search after I hit enter. This seems like malware. I found a few extensions in chrome that I did not install -- and I removed them. ...
1
vote
0answers
1k views

suddenly windows 7 asks for username and password

I think my computer has been infected with a kind of virus or malware. Yesterday I locked my windows and went out of house, at return as I tried to use it again it asked for a password! (I'm pretty ...
1
vote
0answers
98 views

Removal of Smart Web Search from system

Somehow Smart Web Search has been activated in my system. When I searched about it, I figured out that it's a hijacker program. Is there any way to remove this thing? I tried to remove it but was ...
1
vote
0answers
145 views

Remove Delta Search from IE / Chrome

After downloading a python eclipse add-on, I was attacked with the delta-search virus. I tried removing the Delta Search entries using Control Panel as well as the Yantoo entry as suggested by this ...
1
vote
0answers
879 views

Detect and remove malicious malware chrome extension that opens many tabs with ads

I observed throughout the day yesterday three episodes where my processor gets hijacked for a minute and the memory gets maxed out (12 gigs). The culprit was a seemingly infinite number of tabs being ...
1
vote
0answers
237 views

Revert to “clean” or “saved” snapshot after executing malware in VirtualBox

I am using my virtualbox to dump the API calls for malware by using a tool. I did saved a "clean/uncontaminated" state before I executed the malware. However I did not find a way to revert back ...
1
vote
0answers
269 views

Is there a way to log Windows command line operations?

I have tried looking for an answer to this with no avail. I was just wondering if there was any sort of tool or software that recorded all operations that had been done through command line on a ...
1
vote
0answers
196 views

Detect Java in chrome

A vBulletin site I manage has been infected by some malware, it tries to run a java applet. Is there a way I can get chrome to show me where in the source the applet is coming from so I can remove it? ...
0
votes
0answers
7 views

File Segment Unreadable Error After Upgrade/Malware Restart

I tried upgrading from Windows 7 to Windows 10 but the upgrade tool MediaCreation seemed to be held up when initiating the restart, so I cancelled the installation. Before I initiated the install ...
0
votes
0answers
38 views

Remove ads malware from Chrome

A malware smuggled its way into my chrome. It ads ad JS snippet into footer, before tag: However, what's peculiar is that I found that it only injects itself into one website: ...
0
votes
0answers
23 views

more problems post malware scan and defrag than before

ok so, the little hiccups my PC has been having have turned into a full on dry heave. the issues i used to have were as follows: I have windows 7 and for some reason it keeps telling me to shut down ...
0
votes
0answers
15 views

Protect debian from a typical dropper (malware)?

I have a Debian box that I have pretty secure. Browsers are rarely used, except lynx which is used almost exclusively to download specific files. The daemon servers running on the machine are just a ...
0
votes
0answers
121 views

Decrypt files encrypted by LeChiffre ransomware

Over the weekend, my personal server got hit with the LeChiffre ransom ware. Unfortunately, they were able to get in due to an insecure Active Directory account. I've since disabled all accounts and ...
0
votes
0answers
56 views

Haven't found DNS Unlocker in the Task Manager. Where could it be?

This morning I found DNS Unlocker on my workstation, and since then I am trying to remove it. I guess, I visit some wrong website yesterday during the lunchtime. I really need help with this. There’s ...
0
votes
0answers
39 views

How do I determine if this ad pop-up is a malware on my laptop/router or my ISP just being greedy?

Request: Kindly do not mark this question as a duplicate without reading the whole description. I know this sounds like any other malware-infection question, but I request you to please read the whole ...
0
votes
0answers
32 views

Mac OS X Proxy Change Log?

I had an odd experience today, while trying to browse internet I received unable to connect to Proxy. Using Mac OS X 10.11.2. Went to Network Settings and discovered http traffic being sent to Proxy ...
0
votes
0answers
12 views

Ctrl keys periodically “rebelling” and acting oddly

Time to time (pretty often), my Ctrl keys seems to go crazy. For few seconds to few minutes, if I press one of them, it will instead press randomly either: Ctrl + F1, Ctrl + 5 Ctrl + 6 + = + - ...
0
votes
0answers
106 views

How to get rid off DNSUnlocker on el capitan

For a few days I have now the problem with StackOverflow and other StackExchange websites (didn't notice it on any other website yet) that I see advertisements from DNSUnlocker. It took a while to ...
0
votes
0answers
45 views

Running peer block lowers the CPU usage - Am I being hacked?

Why is it when I start peer block my CPU usage goes down 20%? I've been using peer block not because IO'm file sharing but because I just want to better secure my computer. I use its default p2p ...
0
votes
0answers
35 views

How does a person immediately determine whether a link is malicious without clicking it?

I recently started moderating a small Twitch chat, so one of the things I have to deal with is malicious linkage. Whenever someone posts a bad link, even one masked by a shortened URL, someone in ...
0
votes
0answers
62 views

How do you properly configure EMET to prevent MACROS in MS word, etc. from executing other programs such as Iexplorer.exe?

How do you properly configure EMET to prevent MACROS in MS word, etc. from executing other programs such as Iexplorer.exe ?
0
votes
0answers
26 views

Weird “Local Address” in lots of processes

I noticed a weird address in the Local Address column in the Network tab of Process Hacker in lots of program that work with internet connection (like chrome, firefox, dropbox, thunderbird etc..). ...
0
votes
0answers
56 views

Cuckoo Sandbox Sample Reports

I am trying to find some Cuckoo Sandbox sample output reports.. I started with malwr.com, the problem is that I can't scrape the website because I can't it uses javascript to fill in the parts I want ...
0
votes
0answers
87 views

How does one Blacklist a patch based on Knowledge Based/KB number?

I installed two updates today on a Windows 7 machine. One was KB3035583, which was purported to fix problems with Windows. The other was a malware definitions update. KB3035583 turned out to be ...
0
votes
0answers
20 views

Strange HTTP connection requests from one machine to all other machines on the Network “GET /currentsettings.htm”?

When doing some research on google I found that Netgear Genie application seem to be sending HTTP requests to every web server on port 80 on the network ? How would I stop this strange behavior from ...
0
votes
0answers
84 views

Yandex.ru trying to connect?

I recently discovered Yandex browser, and decided to give it a try since I'm losing faith in Chrome, and wasn't too displeased with Maxthon. After trying it out, I didn't like it, and decided to ...
0
votes
0answers
185 views

How to remove Google search Result redirect virus in all browsers?

I have a virus redirects the google in all browsers when i click search to another search engine(Google Custom search) I tried many solutions found in another questions or in google but nothing ...
0
votes
0answers
334 views

comparing between two VM snapshots?

I already know some programs can compare between two snapshots but they only work on my real machine but I want to know how to know the difference between two virtual machine snapshots Example : ...
0
votes
0answers
61 views

Windows Possible Malware

Service Host : Local System is using a lot of system resources.This happens often. One time Windows Explorer consumed more than 90% CPU and RAM.I wasn't able to open Microsoft Safety Scanner website. ...
0
votes
0answers
34 views

How to prevent sotware installation in Windows10 w/o asking machine password

Recently I upgraded to Windows10 and my brother did some downloading of books which brought some malwares too like mystarsearch engine, AnyProtect etc... Even after un-installing from Contol Panel it ...
0
votes
0answers
27 views

Media streaming malware and root key changer?

My home PC My laptop and now my friends laptop all get registry root changes I cant undo after being connected with my iPhone 6??! Even after replacing the phone. How can I stop it?? I think I worked ...
0
votes
0answers
41 views

debugging zeus botnet in visual studio 2010

I am a newbie in the area of botnet detection,IDS.I want to understand the control flow of zeus botnet by running it in Visual studio 2010. I am successfully able to build zeus in visual ...