Questions tagged [malware]
Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.
-1
votes
0answers
18 views
What kind of application works on the background? [closed]
Viewed the list of applications that use Wi-FI and came across this
problem
What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and Titanium Backup are ...
-2
votes
3answers
52 views
Is a rooted Android phone safe after a factory reset? [closed]
I bought a used phone. Is it safe after I do a factory reset? Do I have to worry about malware or remote access if it was rooted before I perform a factory reset?
0
votes
0answers
17 views
malicious software runs on the background of android phone cannot see it - how to find and remove? [migrated]
I know that a malicious malware / spyware has been installed on my galaxy s 3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have anything ...
0
votes
1answer
102 views
How to decode possible malware powershell command
I got a file which should have been a movie but turned out to be a shortcut to execute a powershell command. The details are:
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoPr -WINd 1 -...
0
votes
0answers
22 views
All my files extention turned into .xhfyabiia file ? what kind of malware is that? [duplicate]
this morning I opened my pc and got all my files turned into xhfyabiia files. What is that
I have searched Google for 3 hours and got nothing, I have been frustrated because of this.
What kind of ...
0
votes
0answers
10 views
virus duplicates exe file with (dot) at the beginning of its name [duplicate]
I am having a weird virus in my laptop.
Whenever I open a (.exe) file it duplicates it and the new file has the same name as the original exe file but with a dot (.) at the beginning.
At first its ...
1
vote
2answers
56 views
How dangerous it is to download a file, even for anti-virus scanning
Can anti-virus to run the malware in the file while checking the file (for example, the technology of buffer overflow)? If can, how then to check files for malware that you want to download from the ...
2
votes
1answer
35 views
Check actual occupied disk space in case of malware
I have a win 10 HP laptop. Recently, I got infected with some malware (don't know what exactly, installed antivirus detected a couple of trojan generics, out of which one was most definitely a false ...
0
votes
2answers
131 views
False positive? Microsoft Security Essentials detects Nemucod in tmp.edb
In response to having this question marked as a duplicate, I added at the end a section explaining why this is not a generic malware removal question.
Today, I got a popup saying that I would be ...
0
votes
1answer
26 views
Source of malevolent e-mails
Every now and then, I receive e-mails with an obvious malevolent payload (such as a Word document with harmful macros).
I am not worried by these e-mails, which I can recognize, but I noticed that ...
2
votes
1answer
86 views
Malicious redirect from google search
I encountered malicious redirects from Google Search results in two different laptops.
While browsing Google search results on chrome, I click on one of the links to a trusted https website. The ...
-1
votes
1answer
77 views
Emulating a native USB stick within vmware
I use a sandbox to test malware any analyse it.
One of the latest malware explicitly looks for USB-sticks to write code on it.
What I'd need is a little (windows) tool to emulate/fake a USB stick ...
0
votes
0answers
50 views
Autoruns: Showing bogus dates in 'TimeStamp' column
My copy of Autoruns is showing some very strange dates
in the Timestamp column.
Dates as far back as 1915, with some in 1947 and several showing 2/24/1929.
Could anyone explain what they think the ...
0
votes
1answer
45 views
Is this some type of malware?
I ran chkrootkit on my Linux Mint system, and it complained about several processes like this one:
scott 31745 0.0 0.3 1206060 120352 ? Sl Oct03 0:15
/usr/share/atom/atom --type=...
-5
votes
2answers
130 views
what does this bat file do?
I found a file with the following content that was on the flash:
File
What coding does it use?
How to decode it?
0
votes
0answers
52 views
How to remove malware from Google Chrome Windows 7? [duplicate]
When I search in Google Chrome it first shows the ads and then the search results. On clicking Ads it navigates to search feed tech website, which seems the malware/virus
It has been happening from ...
2
votes
0answers
41 views
Malware popup - how to fix? [duplicate]
The past couple of days I've been periodically getting this pop up through my antivirus. I'm not familiar with what to do with malware but I have made sure there are no recently installed apps- I have ...
2
votes
0answers
55 views
Identify location of infected files Clamscan says it found without sucess
I am using a devuan system and while doing clamscan -r -i / the clamscan report shows up two infected files.
However clamscan do not seem to create any log of the searching so I am stuck knowing my ...
0
votes
0answers
733 views
Unable to uninstall Paragon HFS+ For Windows
I wanted to create a bootable usb key of MacOS Sierra so I needed to be able to read HFS partition on my Windows 10 computer.
After a quick research I found this software : https://www.paragon-...
0
votes
0answers
23 views
'ise' file in root of Macintosh HD
My Macbook Pro running macOS Sierra has a file named ise in the root directory. Is this malware, and safe to remove, or is it an important system file?
0
votes
1answer
46 views
Defender not removes Gemius malware
Sometimes my Chrome browser opens window with Gemius advertising:
https://gasurvey.gemius.com/recruiting/index.php?lang=en&sid=61998
I suppose Windows Defender should remove this virus. But why ...
-1
votes
1answer
2k views
What's behind HEUR/AGEN.1023813
Currently, I am messing around with Avira, Kaspersky & co. and C# Malware. My program is getting detected by Avira with the signature "HEUR/AGEN.1023813".
What does this signature mean? (What ...
-2
votes
1answer
79 views
Can malware spread from Android to Windows
Could malware from an Android-based smartphone affect a Windows Vista-based desktop PC via WiFi if both devices are connected to the same WiFi?
2
votes
1answer
34 views
Will a format/OS reinstall remove viruses? [duplicate]
I have had a couple of run-ins with viruses and malware before, and have found that a format and re-install of the OS is the easiest way of dealing with them.
But, my experience has simply been: PC ...
0
votes
0answers
81 views
VirtualBox Agent.py in Cuckoo startup error
I am new to the Malware Analysis field. I installed Cuckoo and VirtualBox and did all the necessary configuration that is required.
However the problem I am facing is that when I run cuckoo after ...
1
vote
1answer
52 views
What causes chrome to automatically install extensions?
I have installed Chrome Beta on my computer. Immediately after opening it for the first time, it warned my about several extensions that where installed automatically:screenshot of warnings
The ...
1
vote
0answers
68 views
Configuration files for Windows Taskbar
I'd like to know (a) where the configuration files for the Windows Taskbar are stored, and (b) how to edit the files to remove the item of malware.
Yesterday I installed Foxit Reader and Foxit Mobile ...
2
votes
1answer
47 views
Reusing peripherals from an infected machine on a clean one
I just built a new PC and I was wondering if I could use my old keyboard and mouse from my old infected machine on a new one.
I have a Razer Blackwidow V2 keyboard and a Razer Mamba TE mouse and I ...
0
votes
1answer
279 views
Is this a virus? Hexagonal shaped icon preventing Windows 10 shutdown
This app is preventing a shutdown in Windows 10, and I cannot find it in the process list.
Any ideas what it is? Do you know what this icon is for?
0
votes
0answers
71 views
Prevent application from creating files inside a folder
Google Chrome has been injecting their own malware scanner, called Software Reporter Tool, bundled with their browser without any option for the users to select what the malware scanner is allowed to ...
1
vote
0answers
137 views
Eset Internet Security blocking some of 'in' communications of svchost.exe
I have Win7 Ultimate and Eset Internet Security. I recently noticed that Eset blocked a lot of in communications made by svchost.exe . The svchost.exe is original microsoft and not some malware in ...
2
votes
2answers
1k views
Windows 10 high CPU usage unless task manager is opened
A desktop gadget I am using indicates 100% CPU usage. But every time I open Task Manager to find the cause, it suddenly drops to 10-15%. If i close it, it spikes back to 100%.
Also Command Prompt is ...
0
votes
0answers
125 views
FBI PSA on VPNFilter malware
Is there a way to tell what routers this would apply to?
Also would merely rebooting or even changing password be effective?
https://www.ic3.gov/media/2018/180525.aspx
FOREIGN CYBER ACTORS TARGET ...
1
vote
1answer
262 views
“chron-34e2fg command consume 100% CPU on Linux AMI”
Hello i'm not the principal answer of this question, however, i want to answer at this Original post asked at the wrong place, in fist part i said how i fix it and then i will edit this post to say ...
1
vote
0answers
15 views
MsMpEng.exe just ran alongside another process named “0day.exe” (or something similar) [duplicate]
OS: Win 7 x64 Ultimate
Just after waking up my computer from sleep and hearing the HDD being accessed repeatedly a few hours later (disk access sounds, 2 seconds of silence, repeat for about 10 ...
0
votes
0answers
41 views
My browsers are hijacked by Hao123.cn [duplicate]
I got a program from a customer, and it was infected somehow. I uninstalled it, but problem still persist. My browsers shortcuts gets altered every 4-8 hours, ex. my Chrome.lnk get altered to contain ...
0
votes
0answers
28 views
Virus-safe first boot without CDROM
My previous PC has very strange symptoms and I've become very paranoid about malware. I've purchased all-new hardware to ensure I have a known-clean PC. I've spent a good bit of cash, and want peace ...
0
votes
1answer
134 views
Requesting Advice On Preventing Ransomware (also very odd text in my win.ini cfg)
I had just recently prevented a ransomware attack and am still looking for malware as I am curious. I had looked in my win.ini file this morning and found some odd text that even Google Translate ...
0
votes
1answer
2k views
Malwarebytes identified Google Chrome user data as “potentially unwanted”!
A few days back I faced irritating popups called "Ads by Advertise" in Google Chrome, which displays ads when certain highlighted keywords were hovered over. The issue was specific to Chrome (it did ...
0
votes
1answer
113 views
Unknown VBS script on my browser download folder
There is a _zipit.vbs on my download folder. I use Firefox
The code opened in notepad below. This file has been on my computer for 6 months.
I dont know where it came from but googling seems to ...
1
vote
1answer
84 views
Prevent Infection of USB drive
I have a bootable USB drive full of computer repair tools. I would use it to repair a computer that might very well be infected by a virus or other malware. I would like to know how I can prevent ...
0
votes
1answer
464 views
How to remove Chromium from programs and features windows 7?
Through a downloaded program a chromium browser got installed as well, unwanted.
As suggested in other topics concerning this matter I've deleted chromium from %Appdata% and program files.
Are ...
0
votes
2answers
99 views
Strange cmd encrypted script sent by email
Today i received something very insteresting. Its a .cmd script with encrypted commands. Can someone tell me what kind of encryption is this? It's possible to decrypt it? Or how windows read this type ...
0
votes
1answer
95 views
Why, after turning on a Windows 7 PC, the background was missing, history/cookies/cache were cleared, and all desktop elements were gone?
So, there's a network of PC's with Windows 7 in them (one is 32bits and the other one 64bits). This has happened to 2 of those machines, when my client turns them on, all of the desktop elements are ...
1
vote
1answer
631 views
Is Anki (for Windows) open-source and safe? [closed]
Is Anki’s (for Windows) source code available? On this page, the Windows tab doesn't show a source download. But its Linux tab does. Is Anki for Windows safe, i.e. malware/spyware free?
-1
votes
1answer
44 views
Sometimes my pc works slower but when I open task mannager is magicaly works well
It's not an ugernt situation but still this problem annoys me. Sometimes if I leave the pc idle when I come back it works a bit slower and when I right click on the desktop to refresh it takes some ...
0
votes
1answer
155 views
Is it too great of a security risk to connect my Windows XP virtualbox to the internet? [closed]
I'm new to this forum so hopefully I'm posting to the right place.
I'm trying to get an old video game (PacMan World 3, released in 2005) to run on Windows Xp in my VirtualBox (the host computer is ...
1
vote
1answer
484 views
Bypass UAC by using Remote Desktop to connect to localhost?
I can use Remote Desktop (RDP) to connect to computer B from computer A without typing my password, and vice versa, because I use the same account on these two computers. Further, in a remote desktop ...
0
votes
0answers
28 views
Contents of Pictures, Music and Videos folders keep getting mysteriously deleted from Windows 10
A few weeks ago I noticed that these folders that had over a decade's worth of media stored in them were completely empty. Totally emptied out. And those were the only folders this happened to (that ...
0
votes
0answers
115 views
Powershell (malware?) running on server eating up all resources
We have a Windows 2008R2 Standard server that we use for SQL Server. We are going to move it to a new host once we figure out why powershell is eating up all of our resources. We don't want to move it ...
