Questions tagged [malware]

Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

How Do I Remove Malware From Windows 11 [duplicate]

From last 2 weeks I realized that my pc has a malware. i scan with software but didn't remove yet. please give me the best solution for it.
voicelifemedia's user avatar
-5 votes
0 answers
60 views

Windows 11 Hacked - Fileless Malware : how do I block incoming bluetooth/wifi requests at the login screen? [duplicate]

My main question is does anyone know how to block incoming bluetooth/wifi requests at the login screen? Everything below is an explanation of what is currently happening to my system: I have been ...
Russ Du Preez's user avatar
0 votes
1 answer
61 views

Chrome trying to download something?

Lately my Kaspersky antivirus has been showing weird notifications ahout blocking download attempts made from Chrome because it contains adware and such. Here's the log: Event: Download denied User: ...
Rohith Rathod's user avatar
-1 votes
2 answers
44 views

"Windowns Setting": Result from Win 10 search bar

The question is whether the search bar result displaying an unlikely spelling error can be ignored or is a clue to the presence of something malicious. It began with my need to know more about ...
i YAM GzORM's user avatar
0 votes
1 answer
84 views

ISP Notice Regarding Infected Computer and Potential Disconnection

Recently, my parents received an email supposedly from the ISP (Internet Service Provider) stating that their computer is infected and if they don't take steps to clean it, they may face disconnection ...
eLAINe's user avatar
  • 1
0 votes
1 answer
74 views

Recovering files with TestDisk & PhotoRec detected as malware

I have a personal device that has Bitdefender installed. The device is updated and scanned regularly. There has been no malware detected to date. While running TestDisk and PhotoRec to recover files, ...
Ryan's user avatar
  • 1
0 votes
0 answers
28 views

PHP website getting hacked - dir names changed

I'm new to PHP and Apache. I come from Node.js/Java backends and I'm new to this tech stack (PHP, CGI, Apache etc). My site currently uses ckeditor to handle user uploads and has high traffic. Often, ...
Leonardo Santos's user avatar
0 votes
0 answers
51 views

Possibly Malicious code execution on startup

Checked my event viewer to see if my system was starting any funny commands. This is due to the fact i noticed a sudden slowdown on my pc after startup. Im wondering if an event like this is normal; ...
N S's user avatar
  • 1
0 votes
0 answers
45 views

Dotted transparent selection box appears after closing Word documents

When I close Microsoft Word files, this annoying dotted transparent selection box appears on my desktop home screen. When I close any other file type, a translucent selection box appears, which seems ...
Mattpats's user avatar
  • 101
0 votes
1 answer
200 views

Suspicious script meddling with /usr/bin/open

I'm on macOS Ventura 13.2.1 (22D68). I run a script in my computer and the outcome was pretty much as described in this post. So some files were installed to the /tmp/ folder, and the Opera browser ...
aaragon's user avatar
  • 103
0 votes
0 answers
36 views

Would it be possible to create a batch file or windows task for malware check?

Would it be possible to create a batch file or windows task that would monitor all drives for any new files showing up, calculate their hash and check virus total for malware flag, then if malware ...
insecureenthusiast's user avatar
1 vote
1 answer
61 views

Is situation (with GPG) possibly a malware attack?

I am taking care of an ubuntu server (22.04) and suddenly I was not able to access some files via FTP. I checked a few things and noticed a gpg root process consuming a lot of CPU. It kept restarting ...
Jorge's user avatar
  • 121
0 votes
1 answer
19 views

When AV software puts files and various malicious "objects" in "quarantine", what exactly do they actually do?

I had malware on a computer, which Malwarebytes managed to remove. Or did it? It rather "put it in quarantine". And it's remained like that. I see no way to actually delete it. This appears ...
C. Naslund's user avatar
0 votes
1 answer
620 views

What is “Service Host: Secondary Logon?” Is this a sign of malware?

I found the process “Service Host: Secondary Logon” running under windows processes in task manager, with command line file in system32 svchost.exe, which I‘ve found running under my username at least ...
user3709's user avatar
  • 119
0 votes
1 answer
69 views

Volume boot record virus infection

My pc have a RAT which survive after system format. It's fully undetectable from any antivirus software and av rescue disks ... I've tried to flash my BIOS. Then i used that command from linux ...
Zanarhi's user avatar
0 votes
0 answers
36 views

RunDLL and Regsvr32 Exploits - how to mitigate or stop? [duplicate]

I have installed Malwarebytes and Spyhunter 5 and run full scans and yet Malwarebytes still shows blocked calls to nefarious domains and IPs via regsvr32 and rundll32. Is there a way to find the ...
Jay Croghan's user avatar
0 votes
0 answers
116 views

BIOS has a password which I never set (Rootkit?)

Background info: our network was infected years ago by a hacker (loser stalker). I suspect he was using Remote Desktop, as the icon appeared when I unhid Windows items, like it had been used. I re-...
user26171's user avatar
0 votes
1 answer
202 views

Cannot delete a .dll file [duplicate]

I downloaded Internet Download Manager from a piracy website and after downloading I tried to install it. I read the instruction manual given with the file and followed it but later I couldn't install ...
Nazmul Hasan Shipon's user avatar
0 votes
0 answers
5 views

Remove Malware PHP/Remoteshell.C from Wordpress websites [duplicate]

I got infection by a malware in some Wordpress websites that are installed in a remote Windows Server 2016 with IIS The malware is PHP/Remoteshell.C and Windows Defender catch it and put some files in ...
Luka Milani's user avatar
1 vote
0 answers
418 views

Found xmrig running on new server, is what I did to remove it enough?

I saw my server's cpu usage was at 100%, so I investigated a bit and found Xmrig running. This is a Vultr OpenLiteSpeed Django server. I had installed CyberPanel via the cyberpanel install script on ...
Vellutante's user avatar
1 vote
2 answers
142 views

Prevent any batch file from closing automatically

I am worried my machine may be infected with malware. When I first log in there are batch scripts that open and close automatically very fast. Is there a way to see what program(s) executed a batch ...
user avatar
0 votes
1 answer
476 views

Is ExpressVPN trying to install malware on my PC?

I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan: HEUR:Trojan.Win64.Reincarnation.gen Kaspersky'...
user0713's user avatar
0 votes
0 answers
21 views

How I can got recovery from virus attack please [duplicate]

How I can remove viruses from PC after they got access in to my pc through online installation and desktop remote control in which they encrypted my file and my password and phishing me through ...
user1744380's user avatar
0 votes
1 answer
334 views

How is it possible to be infected by a Trojan without downloading anything suspicious?

After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
Aqqqq's user avatar
  • 161
0 votes
1 answer
7k views

Suspicious Executable - Samsung Magician

I'm hoping someone may be able to give me some input on an executable I found running every time I boot up my PC. I use the Samsung Magician software which runs on startup, but it wasn't until today I ...
user1736545's user avatar
0 votes
1 answer
525 views

7zip program infected with malwares and viruses [duplicate]

7zip program infected with malwares and viruses. Virus Total scanned the installer as good with malicious and suspecious relations. The 7-zip program 7-zip v22.01 - (may be infected) From the Virus ...
smith john's user avatar
0 votes
1 answer
65 views

Find/Remove suspected virus/malware on macbook air (mapi.sport80.com)

I've found a program running on a friend's Mac that is under the name "mapi.sport80.com" in screen time & it has been running consistently for 5 days straight, it looks to be accessing ...
Fergus Johnson's user avatar
1 vote
0 answers
110 views

Loss of control over my computer mouse

I've had this strange thing happen to me on 3 separate computers running Windows 10 now (on my work computer at a previous job, on my previous home computer, and now on my work computer at my current ...
Daar's user avatar
  • 111
1 vote
1 answer
175 views

Automatic BIOS Update - No logs confirm legitimacy

As the title states. I rebooted my PC today and was greeted with a "BIOS is updating. Do not turn off or unplug from power." I have an Asus Sabertooh Z170 mark 1. The only Asus utility I ...
SheerKahn's user avatar
  • 121
2 votes
0 answers
181 views

Are files without extension dangerous?

I recently run a test with Bitdefender and there were several encrypted files that it could not check. All of them in were in APO.zip files which were contained in another Zip files. Some of them were ...
Dom's user avatar
  • 31
-1 votes
1 answer
103 views

Is there an option to make Microsoft Safety Scanner ask before removing what it thinks is malware?

Is there an option to make Microsoft Safety Scanner link ask before removing what it thinks is malware? It looks like it might try to remove what it thinks is malware immediately and without asking, ...
barlop's user avatar
  • 23.2k
2 votes
3 answers
2k views

Is AV scanning zip files with non-exe contains re-assuring/reliable?

I was wondering how safe is scanning a .zip file and depending on the AV report on what to do with it. So specifically: If I have a .zip file and I run a scan using a good antivirus and does not ...
Jim's user avatar
  • 139
1 vote
1 answer
121 views

ANONYM USER whatis this ? i never saw this before

I was searching for some info on sdhl.dat and found this: Hello I have a .dat file on my PC and every time I try to delete it, it comes back after restarting the PC. After some search I found this &...
Daniel's user avatar
  • 13
0 votes
0 answers
34 views

System process overwritten entire folder of images

I noticed abnormal amounts of disk access, checked Resource Monitor and saw "System" writing millions of bytes to various files in one folder. Checked the folder in question, the thousands ...
ArraysStartAt1's user avatar
4 votes
1 answer
5k views

All my Chrome searches are redirected through www.getsearchredirecting.com

Since recently (I don't know exactly when it started), all the searches I do on Chrome search bar are redirected through this site www.getsearchredirecting.com. I did a malware scan with two common ...
Bakaburg's user avatar
  • 241
0 votes
0 answers
11 views

How to get rid of Trusted-Streams.life trojan/adware? [duplicate]

I have a Windows 11 PC, and several members of my family who aren't terribly savvy about what notifications they click "OK" on. Result: I now have some kind of malware called "...
Shaul Behr's user avatar
  • 1,457
0 votes
0 answers
45 views

Windows 10: Can't get Rid of Malware Popups Notifications Spoofing Antivirus [duplicate]

I'm using Windows 10 Home, and I'm this popup, that keeps coming up at random times, at least hourly: And, just a few minutes ago, this: I have disabled all popups in Internet Options. I ran ...
MSIS's user avatar
  • 115
6 votes
0 answers
2k views

How can I forbid the installation of WPS office on my company computers?

WPS office has some dark patterns now. When a client sends a file to one of our employees, if they have WPS office on their phone (default on Huawei and Xiaomi phones and nobody ever changes defaults) ...
Magnetic_dud's user avatar
  • 3,570
0 votes
1 answer
82 views

Windows 10 'Reset this PC' good for removing all malware or is there a better method to fully reset a laptop?

Resetting my Windows laptop with the inbuilt factory reset seems to be a simple task which will bring it back to a blank slate with just Windows installed - as if I just brought the device from the ...
William's user avatar
  • 15
1 vote
0 answers
37 views

Virus Total report lists 48 different types of malware in a file, are they all the same?

I bought a code scanner for my car on Amazon and it came with a USB key with the drivers, etc. Windows Defender identified malware on it and appears to have cleaned it up from my Windows 11 PC. I ...
Eric's user avatar
  • 1,203
0 votes
1 answer
839 views

Is “Archive.Test.Agent2-9953724-0” a virus or false positive?

I do a routine scan of my computer every day using ClamXAV. I took a look at the report and it said I had 89 infected items. The infection name is Archive.Test.Agent2-9953724-0. The name doesn't sound ...
Caecilius-rgb's user avatar
0 votes
1 answer
2k views

Trojan virus threat 'removed or restored'

I recently downloaded a file from a malicious website by mistake. It had a trojan virus with the name as following :- Trojan.win32.Zapchast My windows defender detected the threat and then quarantined ...
Abdul 's user avatar
0 votes
1 answer
56 views

How does Google SMTP work?

I am performing malware analysis on a piece of malware which sends emails. The malware contains some hardcoded email addresses. It uses Google SMTP to send emails and I am not sure how it works ...
Nagarajan Sree's user avatar
0 votes
1 answer
24 views

Monitor keyboard access on the Windows lock screen

I don't do this very often, but every time I lock the screen in Windows [Win+L], the keyboard (and sometimes the mouse) stops responding and it goes straight into the password field and it starts ...
Unix's user avatar
  • 29
4 votes
4 answers
11k views

My CPU is working on 100% until I open Task manager

I am here because I have a problem. My CPU is working at 100% (while I am idle) until I open Task Manager. When I open Task Manager it shows that my CPU is on 100% and after a half seconds it ...
Nikola's user avatar
  • 41
0 votes
0 answers
136 views

How to start in SpyHunter 5 scan offline?

currently I collect good tools to remove malware in sad case of getting infected despite live-protection from AV. Now I'm interested in SpyHunter 5. Despite being aware of program suspicious past I ...
Dragodraki's user avatar
1 vote
0 answers
28 views

Windows OpenedFilesViewer. Strange unaccountable file handles

If using the nirsoft’s OpenedFilesViewer, which prints file handles. There are some “processes” with strange chinese characters that have a handle on inexistent files on C: drive. I haven’t paid much ...
psisis's user avatar
  • 19
2 votes
4 answers
15k views

What's the safest way to open a suspicious link?

Sometimes I get very suspicious messages or I see a random link somewhere I obviously don't click on them but I'm still curious what's on the site. So that makes me wonder what's the safest way to ...
Forgotten-Storm's user avatar
1 vote
1 answer
272 views

How do I ensure a laptop doesn't have any sort of bug or tracking device?

Someone recently gifted a laptop to a friend of mine. Without going into details, the friend is suspicious of malware / bug / tracking, but it is a very nice laptop and they would like to keep it. How ...
earmarkeddoweling's user avatar
1 vote
2 answers
2k views

How do you find what program is installing third-party Chrome extensions?

When I added a new profile to my Chrome installation I get the alert message in the top-right New extension added (Web Safety) Clicking on the alert message opens a message saying that another ...
bigLarry's user avatar
  • 711

1
2 3 4 5
21