Questions tagged [malware]
Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.
974
questions
0
votes
0answers
16 views
Unable To Run Sudo On Terminal (Suspect Malware)
When I Run Any Sudo Commands I get:
sudo: /etc/sudoers is owned by uid 501, should be 0 sudo: no valid sudoers sources found, quitting sudo: error initializing audit plugin sudoers_audit
This behavior ...
1
vote
0answers
21 views
Unknown (possibly malicious) behaviour when executing .mkv file
Context:
I was transferring files from my phone to laptop through USB. I was curious about one of the videos in the Telegram folder (which had a .mkv extension) and double clicked. Now normally when I ...
-2
votes
0answers
20 views
Malicious issues found in program (RecentX) that reports as clean on virustotal.com [closed]
Trying a program called 'RecentX' (https://www.conceptworld.com/RecentX) on Windows which got great reviews, I had come across some worrying issues which were reproducible on every other PC it was ...
-4
votes
0answers
28 views
How has my instagram account been hacked? [closed]
After Microsoft Defender detected some malware (trojan and others) on my Windows 10 account last weekend I quickly reinstalled Windows to avoid any security problem.
However, today I have detected ...
1
vote
1answer
55 views
Should I do anything after formatting my computer because of malware infection?
Yesterday I realised that, after installing some software last weekend, Microsoft Defender was detecting several file on my Windows 10 document's temp folder. Some of them were deleted by the ...
1
vote
1answer
20 views
Is Windows safe from BadUSB/Rubber Ducky on lock screen?
If there’s computer with the login screen on, will plugging BadUSB/Rubber Ducky infect PC? Or is it only possible when you log in to Windows?
0
votes
1answer
43 views
Can computer get virus while on login screen?
Let’s say that computer is turned off and someone turns it on and the login screen shows up. If the person inserts malicious pendrive with autorun.inf while on login screen, will the computer get ...
0
votes
1answer
26 views
My PC got infected if executables of dubious origin were automatically downloaded? [duplicate]
I have a question.
When navigating in page shorteners of dubious origin where there is too much advertising...
And it automatically downloads a strange executable... and I immediately remove it (...
0
votes
1answer
32 views
How big a privacy concern is the fact that any program can access any file from home directory directory in Linux?
In Linux and Windows, a program can easily access any file from any directory using fopen ().
We know how program data is stored in Linux distros in your home directory in .config. This means a ...
0
votes
1answer
24 views
Different Imphash for same PE file
I am analyzing a windows executable (C:\Windows\System32\xcopy.exe). The Imphash value calculated with Python is different from the one shown with PE studio. How can Imphash for a same file be ...
0
votes
1answer
52 views
Can I get infected by just downloading (not opening) file on Windows 10?
Today I received some e-mail to Thunderbird. It had image attached that I clicked:
Which sent me to onedrive.live.com/download?... and automatically downloaded .tgz file. I am not even sure if the ...
1
vote
2answers
41 views
I clicked on a link which turned out to be a malicious advert. Should I format my computer?
I accidentally visited a sketchy website and clicked on a link which I think was a malicious advert. After that I think the site tried to download something on my computer but my antivirus blocked two ...
0
votes
0answers
8 views
Windows 10 installed Visual C++ after random restart? Turned off System Restore? [duplicate]
Basically, I came back to my computer after leaving it on and logged in (it locks itself after some time), and realized that it had restarted in the time I was away. Shortly after login and my on-...
0
votes
0answers
12 views
Attempted to do system restore, correct restore point overrun by Install restore points
I recently did some changes to my computer that resulted in unexpected and unwanted results. I had the sense to create a manual restore point before I did this, but I didn't notice this behavior ...
0
votes
1answer
41 views
What’s the difference between rootkit and RAT? [duplicate]
I know that both can give attacker remote access to computer. Is RAT easier to detect than rootkit? Where are they typically get installed? Can one make more damage than another? Which one is easier ...
0
votes
1answer
99 views
Uninstall Paragon HFS+ .msi
I am unable to remove Paragon HFS+ from my Windows 10 computer. The program is still listed after uninstalling using Add or Remove Programs. Running the command
msiexec /x Paragon-607-PEU_WinInstallSN-...
0
votes
1answer
99 views
Keygen/crack/malware detected as virus only after unzipping
I'm wondering how come a keygen/crack are not detected as virus when it is inside a compressed folder. Only after the unzipping the antivirus detects it as a threat.
0
votes
0answers
58 views
Unknown caller of a deleted exe file
I uninstalled qBittorrent 4.3.3 and deleted the exe from startup folder.
Now every few minutes I get a windows alert saying:
Windows cannot find 'C:\Users\Name\AppData\Roaming\Microsoft Windows\Start ...
2
votes
1answer
27 views
Will installing new Windows build remove any rootkits and trojans?
I have currently installed 2004 version of Windows 10, if i update it to 20H2 version, will i get rid of any trojans or rootkits on my computer? Where are those typically get installed? I don't want ...
0
votes
1answer
48 views
Can malware survive a reset? [duplicate]
In windows 10 settings, there's an option under Recovery for "Reset this PC". It allows you to choose whether to keep or remove personal files, and resets the computer.
Using this option, if ...
0
votes
1answer
168 views
How do I go about investigating Windows Defender alert “VirTool:Win32/ExcludeProc.A”
I received the following notification from Windows Defender several times over the last week.
Things I believe:
It is malware
Its attempting to hide things from Windows Defender
Windows Defender was ...
0
votes
1answer
49 views
Store computer/admin password in the password manager
I have two accounts on my Mac: a standard user account for everyday activities and an administrator account. I always use the standard user account.
I have a password manager (1Password) installed on ...
1
vote
2answers
92 views
Can keylogger record the admin password on macOS
I have two accounts on my Mac: a standard user account for everyday activities and an administrator account.
When I need to do something that requires the admin rights like changing something in the ...
0
votes
1answer
83 views
Is it safe to run the memez computer trojan in a virtualbox vm? [closed]
I wanted to run the memez trojan in a virtualbox vm but i don't know if it has a vm escape code in it. i would disconnect the WiFi from the vm before I ran the virus. so is this safe or can it damage ...
0
votes
0answers
32 views
rundll32.exe running from non-existent directory (malware?)
My computer has been infected with some kind of a malware I haven't been able to idenitfy. I have tried multiple malware scanners and neither of them has been able to find anything.
I have multiple ...
0
votes
1answer
47 views
Can a malware file in a .zip file be executed when testing the .zip file?
OS : Windows 10
Can a malware file in a .zip file be executed when testing the .zip file?
I mean, for example, testing by 7-zip context menu 'test archive'.
The .zip file has no password and just ...
0
votes
0answers
7 views
How to remove Kite Coding Assistant malware that keeps reinstalling itself? [duplicate]
Kite Coding Assistant is a REALLY annoying piece of software that installed itself when I installed Anaconda. It acts like rootkit malware. It starts running in the background as soon as I start up my ...
0
votes
0answers
17 views
OneUpdater Malware Removal, How do I delete the reg key?
I'm trying to delete the key for "OneUpdater". The registry tells me I can't modify it, delete it, rename it, etc. I'm admin. OneUpdater is malware. Any help is appreciated. Win 10 by the ...
0
votes
0answers
29 views
Stop all networking between guest OS and Host OS
I am using fedora on by virtual box as Guest OS for Malware Analysis.
The Host OS is windows 10. I will be unpacking malware/virus on guest OS.
But to ensure it doesn't cause any trouble with my Host ...
0
votes
0answers
31 views
Mac Big Sur repeatedly tries to open “Open Office” for no obvious reason. I suspect malware
Something is periodically (every hour or so) trying to open "OpenOffice" while I'm working in other apps. Because OpenOffice was previously downloaded onto my machine, I get a warning about ...
1
vote
1answer
24 views
How does on know that an app's code isnt the same as the public one?
Let's say I found a cool application but i'm not sure if its malware. But everyone says don't worry its safe because its open source, but how would I know if the actual exe's code is different that ...
0
votes
0answers
12 views
Kernel security check failure(s) over 36 hours of operation into kernel inpage error and system malfunction up till keys going unrecognized at POST
I've done all operations associated with driver purification and disk drive health updated malware defence.
Ran into the kernel security check failures at seemingly random times. When just operating ...
2
votes
1answer
81 views
What is this drive in my computer?
I was trying to create a system restore point in my Windows 10 laptop.
I noticed one of the drives had a weird name, like this ?\Volume{f2f20ba-117 . . .
What is this drive? Is it potentially ...
0
votes
0answers
20 views
How can I remove Kindle ebook DRM using tools where I can be confident that they don't contain malicious code?
I just read the thread How can I remove DRM from my Kindle books? from a decade ago. I guess the first question is whether it's still valid for the latest Kindle formats. The second is, as someone who'...
4
votes
1answer
206 views
How do tech support scams work in windows? Is it malware, phishing, or how else would threats gain access to computers?
I'm currently working for Geek Squad at Best Buy in the front of the operation checking in client computers and I am frequently encountering bogus tech support scams which involves copious amounts of ...
0
votes
2answers
61 views
Determine what changed my desktop wallpaper
How do I determine what caused the change of my background wallpaper? Identify the programm/process if that was a malware, get event information, anything? Somehow find out why that happened.
My ...
0
votes
0answers
27 views
Reset PC and Format External Drives Simultaneously
I've recently visited a webpage that I thought was safe but got a full screen pop-up of something that appeared to be malware. I immediately closed it and did a Windows Defender full scan. No malware ...
0
votes
1answer
25 views
Connect old, possibly unsafe HDD to Windows 10 PC
I have an old HDD from my former laptop which I've been using until around 2013. Now, after 7 years, I want to connect it to my HDD (with a SATA - USB adapter).
I worry a bit about malware on said HDD ...
0
votes
0answers
28 views
I clicked on “show pictures” in a malware e-mail [duplicate]
I carelessly pressed “show picture “in a spam e-mail that was in my unwanted folder
When i clicked the link just disappeared and no picture was shown.how worried should I be?
I did a disk clean-up ...
0
votes
0answers
11 views
Wake on LAN Broadcast on Startup
I have Wake on LAN configured on a few of my devices (all Ethernet Connections). I have recently noticed when I start windows 7 on a laptop I have (wireless), when the logon screen appears (not logged ...
1
vote
0answers
22 views
About Malware occupying memory [duplicate]
Can a malware occupy memory without getting noticed by or displayed in "Windows Task Manager"? How can we detect such malware, if any? Can you give examples of such malware?
0
votes
0answers
17 views
What kind of malware activates itself when a new user created on Windows 10 [duplicate]
Today I have created a new user for my wife on my Windows 10 PC. And when I launched Google Chrome, it started with launchpage.org which is known as a kind of virus that is easy to remove via Regedit. ...
0
votes
0answers
12 views
Firefox Browser Hijacker “zapmeta.de” and “izito.de” on every google result, can't find a way to remove [duplicate]
First i noticed its coming from a nameless extension, i had to reset the browser cause i didn't find a way to uninstall it. Now it came back after at least one PC restart, so there must be malware ...
0
votes
0answers
15 views
Unidentified icon in Mac status bar
I have an unidentified icon that sometimes appears in my status bar (MacOS High Sierra). Graphic quality is low. It looks like a white "O" on an orange background, with an upward-pointing ...
0
votes
2answers
1k views
CPU usage 100% till i open task manager in a 4 months old laptop
I have had an i5 10th Gen machine for 4 months, but I can now see that the CPU usage is 100% till I open Task Manager and as the Task Manager opens, the usage reduces drastically and even comes to as ...
0
votes
0answers
70 views
Shannel error: a fatal alert was received at the remote endpoint. Code 20
I recently learned that I've had a cyberstalker for a year. I'm not tech savvy enough for this.
I found this error message today in my event logs: a fatal alert was received at the remote endpoint. ...
0
votes
0answers
14 views
Malware that causes the taskbar to disappear and a fake Firefox application to install [duplicate]
Just need to ask the community if they've come across this malware that operates in 2 parts(that I've seen):
Installs a program '.2.1.2.3' that makes the taskbar disappear except from the start ...
0
votes
0answers
34 views
Why would a .exe list it's original filename as .dll?
So, I think I got some tag-along nonsense with a browser extension or something. When I restarted my machine the other day, I got a couple of really wonky old .NET framework errors (big huge modals ...
0
votes
1answer
212 views
rundll32.exe making outbound TCP connection
I've been attempting to harden my network, and have taken some extra security precautions for the sake of learning, as well as.. to be secure. I've recently formatted and re-installed Windows 10, and ...
0
votes
0answers
28 views
Is it possible to monitor RDP Sessions or Connections to a PC and Is there a good sessions monitoring program that will log remote sessions?
Is it possible to monitor RDP Sessions or Connections to a PC? I'm hyper-sensitive and a little paranoid about malware with dormant RDP and FTP-enabled code. Is there a good sessions monitoring ...
