Questions tagged [malware]
Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.
1,032
questions
0
votes
0
answers
25
views
How Do I Remove Malware From Windows 11 [duplicate]
From last 2 weeks I realized that my pc has a malware. i scan with software but didn't remove yet. please give me the best solution for it.
-5
votes
0
answers
60
views
Windows 11 Hacked - Fileless Malware : how do I block incoming bluetooth/wifi requests at the login screen? [duplicate]
My main question is does anyone know how to block incoming bluetooth/wifi requests at the login screen?
Everything below is an explanation of what is currently happening to my system:
I have been ...
0
votes
1
answer
61
views
Chrome trying to download something?
Lately my Kaspersky antivirus has been showing weird notifications ahout blocking download attempts made from Chrome because it contains adware and such. Here's the log:
Event: Download denied
User: ...
-1
votes
2
answers
44
views
"Windowns Setting": Result from Win 10 search bar
The question is whether the search bar result displaying an unlikely spelling error can be ignored or is a clue to the presence of something malicious.
It began with my need to know more about ...
0
votes
1
answer
84
views
ISP Notice Regarding Infected Computer and Potential Disconnection
Recently, my parents received an email supposedly from the ISP (Internet Service Provider) stating that their computer is infected and if they don't take steps to clean it, they may face disconnection ...
- 1
0
votes
1
answer
74
views
Recovering files with TestDisk & PhotoRec detected as malware
I have a personal device that has Bitdefender installed. The device is updated and scanned regularly. There has been no malware detected to date.
While running TestDisk and PhotoRec to recover files, ...
- 1
0
votes
0
answers
28
views
PHP website getting hacked - dir names changed
I'm new to PHP and Apache. I come from Node.js/Java backends and I'm new to this tech stack (PHP, CGI, Apache etc). My site currently uses ckeditor to handle user uploads and has high traffic. Often, ...
0
votes
0
answers
51
views
Possibly Malicious code execution on startup
Checked my event viewer to see if my system was starting any funny commands. This is due to the fact i noticed a sudden slowdown on my pc after startup.
Im wondering if an event like this is normal; ...
- 1
0
votes
0
answers
45
views
Dotted transparent selection box appears after closing Word documents
When I close Microsoft Word files, this annoying dotted transparent selection box appears on my desktop home screen.
When I close any other file type, a translucent selection box appears, which seems ...
- 101
0
votes
1
answer
200
views
Suspicious script meddling with /usr/bin/open
I'm on macOS Ventura 13.2.1 (22D68). I run a script in my computer and the outcome was pretty much as described in this post. So some files were installed to the /tmp/ folder, and the Opera browser ...
- 103
0
votes
0
answers
36
views
Would it be possible to create a batch file or windows task for malware check?
Would it be possible to create a batch file or windows task that would monitor all drives for any new files showing up, calculate their hash and check virus total for malware flag, then if malware ...
1
vote
1
answer
61
views
Is situation (with GPG) possibly a malware attack?
I am taking care of an ubuntu server (22.04) and suddenly I was not able to access some files via FTP. I checked a few things and noticed a gpg root process consuming a lot of CPU. It kept restarting ...
- 121
0
votes
1
answer
19
views
When AV software puts files and various malicious "objects" in "quarantine", what exactly do they actually do?
I had malware on a computer, which Malwarebytes managed to remove. Or did it? It rather "put it in quarantine". And it's remained like that. I see no way to actually delete it.
This appears ...
0
votes
1
answer
620
views
What is “Service Host: Secondary Logon?” Is this a sign of malware?
I found the process “Service Host: Secondary Logon” running under windows processes in task manager, with command line file in system32 svchost.exe, which I‘ve found running under my username at least ...
- 119
0
votes
1
answer
69
views
Volume boot record virus infection
My pc have a RAT which survive after system format.
It's fully undetectable from any antivirus software and av rescue disks ...
I've tried to flash my BIOS.
Then i used that command from linux ...
- 1
0
votes
0
answers
36
views
RunDLL and Regsvr32 Exploits - how to mitigate or stop? [duplicate]
I have installed Malwarebytes and Spyhunter 5 and run full scans and yet Malwarebytes still shows blocked calls to nefarious domains and IPs via regsvr32 and rundll32. Is there a way to find the ...
- 121
0
votes
0
answers
116
views
BIOS has a password which I never set (Rootkit?)
Background info: our network was infected years ago by a hacker (loser stalker). I suspect he was using Remote Desktop, as the icon appeared when I unhid Windows items, like it had been used. I re-...
0
votes
1
answer
202
views
Cannot delete a .dll file [duplicate]
I downloaded Internet Download Manager from a piracy website and after downloading I tried to install it. I read the instruction manual given with the file and followed it but later I couldn't install ...
0
votes
0
answers
5
views
Remove Malware PHP/Remoteshell.C from Wordpress websites [duplicate]
I got infection by a malware in some Wordpress websites that are installed in a remote Windows Server 2016 with IIS
The malware is PHP/Remoteshell.C and Windows Defender catch it and put some files in ...
- 101
1
vote
0
answers
418
views
Found xmrig running on new server, is what I did to remove it enough?
I saw my server's cpu usage was at 100%, so I investigated a bit and found Xmrig running.
This is a Vultr OpenLiteSpeed Django server. I had installed CyberPanel via the cyberpanel install script on ...
- 11
1
vote
2
answers
142
views
Prevent any batch file from closing automatically
I am worried my machine may be infected with malware. When I first log in there are batch scripts that open and close automatically very fast. Is there a way to see what program(s) executed a batch ...
Donovan Maronavi
0
votes
1
answer
476
views
Is ExpressVPN trying to install malware on my PC?
I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan:
HEUR:Trojan.Win64.Reincarnation.gen
Kaspersky'...
- 1
0
votes
0
answers
21
views
How I can got recovery from virus attack please [duplicate]
How I can remove viruses from PC after they got access in to my pc through online installation and desktop remote control in which they encrypted my file and my password and phishing me through ...
0
votes
1
answer
334
views
How is it possible to be infected by a Trojan without downloading anything suspicious?
After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
- 161
0
votes
1
answer
7k
views
Suspicious Executable - Samsung Magician
I'm hoping someone may be able to give me some input on an executable I found running every time I boot up my PC. I use the Samsung Magician software which runs on startup, but it wasn't until today I ...
0
votes
1
answer
525
views
7zip program infected with malwares and viruses [duplicate]
7zip program infected with malwares and viruses.
Virus Total scanned the installer as good with malicious and suspecious relations.
The 7-zip program
7-zip v22.01 - (may be infected)
From the Virus ...
0
votes
1
answer
65
views
Find/Remove suspected virus/malware on macbook air (mapi.sport80.com)
I've found a program running on a friend's Mac that is under the name "mapi.sport80.com" in screen time & it has been running consistently for 5 days straight, it looks to be accessing ...
1
vote
0
answers
110
views
Loss of control over my computer mouse
I've had this strange thing happen to me on 3 separate computers running Windows 10 now (on my work computer at a previous job, on my previous home computer, and now on my work computer at my current ...
- 111
1
vote
1
answer
175
views
Automatic BIOS Update - No logs confirm legitimacy
As the title states. I rebooted my PC today and was greeted with a "BIOS is updating. Do not turn off or unplug from power."
I have an Asus Sabertooh Z170 mark 1. The only Asus utility I ...
- 121
2
votes
0
answers
181
views
Are files without extension dangerous?
I recently run a test with Bitdefender and there were several encrypted files that it could not check.
All of them in were in APO.zip files which were contained in another Zip files.
Some of them were ...
- 31
-1
votes
1
answer
103
views
Is there an option to make Microsoft Safety Scanner ask before removing what it thinks is malware?
Is there an option to make Microsoft Safety Scanner link ask before removing what it thinks is malware?
It looks like it might try to remove what it thinks is malware immediately and without asking, ...
- 23.2k
2
votes
3
answers
2k
views
Is AV scanning zip files with non-exe contains re-assuring/reliable?
I was wondering how safe is scanning a .zip file and depending on the AV report on what to do with it. So specifically:
If I have a .zip file and I run a scan using a good antivirus and does not ...
- 139
1
vote
1
answer
121
views
ANONYM USER whatis this ? i never saw this before
I was searching for some info on sdhl.dat and found this:
Hello
I have a .dat file on my PC and every time I try to delete it, it comes back after restarting the PC. After some search I found this &...
- 13
0
votes
0
answers
34
views
System process overwritten entire folder of images
I noticed abnormal amounts of disk access, checked Resource Monitor and saw "System" writing millions of bytes to various files in one folder. Checked the folder in question, the thousands ...
4
votes
1
answer
5k
views
All my Chrome searches are redirected through www.getsearchredirecting.com
Since recently (I don't know exactly when it started), all the searches I do on Chrome search bar are redirected through this site www.getsearchredirecting.com.
I did a malware scan with two common ...
- 241
0
votes
0
answers
11
views
How to get rid of Trusted-Streams.life trojan/adware? [duplicate]
I have a Windows 11 PC, and several members of my family who aren't terribly savvy about what notifications they click "OK" on. Result: I now have some kind of malware called "...
- 1,457
0
votes
0
answers
45
views
Windows 10: Can't get Rid of Malware Popups Notifications Spoofing Antivirus [duplicate]
I'm using Windows 10 Home, and I'm this popup, that keeps coming up at random times, at least hourly:
And, just a few minutes ago, this:
I have disabled all popups in Internet Options.
I ran ...
- 115
6
votes
0
answers
2k
views
How can I forbid the installation of WPS office on my company computers?
WPS office has some dark patterns now. When a client sends a file to one of our employees, if they have WPS office on their phone (default on Huawei and Xiaomi phones and nobody ever changes defaults) ...
- 3,570
0
votes
1
answer
82
views
Windows 10 'Reset this PC' good for removing all malware or is there a better method to fully reset a laptop?
Resetting my Windows laptop with the inbuilt factory reset seems to be a simple task which will bring it back to a blank slate with just Windows installed - as if I just brought the device from the ...
- 15
1
vote
0
answers
37
views
Virus Total report lists 48 different types of malware in a file, are they all the same?
I bought a code scanner for my car on Amazon and it came with a USB key with the drivers, etc. Windows Defender identified malware on it and appears to have cleaned it up from my Windows 11 PC. I ...
- 1,203
0
votes
1
answer
839
views
Is “Archive.Test.Agent2-9953724-0” a virus or false positive?
I do a routine scan of my computer every day using ClamXAV. I took a look at the report and it said I had 89 infected items. The infection name is Archive.Test.Agent2-9953724-0. The name doesn't sound ...
0
votes
1
answer
2k
views
Trojan virus threat 'removed or restored'
I recently downloaded a file from a malicious website by mistake. It had a trojan virus with the name as following :-
Trojan.win32.Zapchast
My windows defender detected the threat and then quarantined ...
- 1
0
votes
1
answer
56
views
How does Google SMTP work?
I am performing malware analysis on a piece of malware which sends emails. The malware contains some hardcoded email addresses. It uses Google SMTP to send emails and I am not sure how it works
...
0
votes
1
answer
24
views
Monitor keyboard access on the Windows lock screen
I don't do this very often, but every time I lock the screen in Windows [Win+L], the keyboard (and sometimes the mouse) stops responding and it goes straight into the password field and it starts ...
- 29
4
votes
4
answers
11k
views
My CPU is working on 100% until I open Task manager
I am here because I have a problem. My CPU is working at 100% (while I am idle) until I open Task Manager. When I open Task Manager it shows that my CPU is on 100% and after a half seconds it ...
- 41
0
votes
0
answers
136
views
How to start in SpyHunter 5 scan offline?
currently I collect good tools to remove malware in sad case of getting infected despite live-protection from AV.
Now I'm interested in SpyHunter 5. Despite being aware of program suspicious past I ...
1
vote
0
answers
28
views
Windows OpenedFilesViewer. Strange unaccountable file handles
If using the nirsoft’s OpenedFilesViewer, which prints file handles. There are some “processes” with strange chinese characters that have a handle on inexistent files on C: drive. I haven’t paid much ...
- 19
2
votes
4
answers
15k
views
What's the safest way to open a suspicious link?
Sometimes I get very suspicious messages or I see a random link somewhere I obviously don't click on them but I'm still curious what's on the site. So that makes me wonder what's the safest way to ...
1
vote
1
answer
272
views
How do I ensure a laptop doesn't have any sort of bug or tracking device?
Someone recently gifted a laptop to a friend of mine. Without going into details, the friend is suspicious of malware / bug / tracking, but it is a very nice laptop and they would like to keep it.
How ...
1
vote
2
answers
2k
views
How do you find what program is installing third-party Chrome extensions?
When I added a new profile to my Chrome installation I get the alert message in the top-right New extension added (Web Safety)
Clicking on the alert message opens a message saying that another ...
- 711