Skip to main content

Questions tagged [malware]

Malware (short for Malicious Software) is a type of software designed to access a computer system without the owner's informed consent.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
16 views

Drrive-by download: what to do? [duplicate]

Googling information about drive-by download I have been found what to do before you get your computer ill with it (a.k.a how to prevent it). But how to behave when you already infected the computer ...
user1916853's user avatar
0 votes
1 answer
65 views

Getting "Some of these settings are hidden or managed by your organization" after malware [Solved]

I had malware and now I'm getting: "Some of these settings are hidden or managed by your organization" after malware On the App screen in Windows under settings. I had this in Chrome and ...
Trent Tompkins's user avatar
0 votes
0 answers
16 views

Can the footer or URL in the footer be removed from a Firebase-generated PDF?

This is my first post, so hopefully I did it right. I will start by saying I know almost nothing about Firebase, so this is probably a long shot, but we are trying to solve an issue with an app built ...
Will Gardner's user avatar
0 votes
2 answers
370 views

why is cmd taking like 20 seconds to open up in windows 11?

When I run cmd.exe, it takes ~20s to load, but when run as Administrator, it works immediately. I've tried: closing background apps, with memory and CPU usage being normal looking online, but all the ...
ZombZ's user avatar
  • 7
0 votes
0 answers
68 views

Is using a different subnet on a downstream router enough to isolate a network client?

Say I have a network host that's potentially infected with malware capable of reaching out to fellow network hosts (possibly able to crack SMB passwords) and replicate itself to other hosts. Is this ...
autobottodoggo's user avatar
0 votes
0 answers
21 views

What does malware do? [duplicate]

When I was 6, I always thought what malware would do is over heat your computer and make your PC explode. But how does malware work anyway? From 5 years old to 8, these were still my thoughts. Can you ...
spaceiscool's user avatar
0 votes
0 answers
859 views

How to fix Secure Boot error "Image failed to verify with *ACCESS DENIED*"(possible firmware rootkit)

When attempting to boot a live OS via USB or CD, I get the secure boot error: "Image failed to verify with ACCESS DENIED". There is no SSD/HDD installed. Secure boot is enabled and while i ...
Ramzialzaki Weir's user avatar
0 votes
0 answers
60 views

high cpu, memory, power usage until i open the task manager they return a lil bit normal

high CPU, memory, power usage until I open the task manager they return a lil bit normal. Also, when I open a game or anything they goes up to 100% then it return normal but with drops once goes up ...
Joel's user avatar
  • 1
1 vote
2 answers
397 views

What could be the cause of multicast on Ports 3289, 22222 and 10004?

I've recently been monitoring my home network traffic heavily (using Netflow). Today I noticed some odd multicast coming from a Windows 11 laptop (it was left on, but unattended). I have AVG and ...
fredmeister77's user avatar
0 votes
0 answers
41 views

Why is a web page rendering improperly only on my machine, in all browsers?

I have recently created a website using GitHub and R/RStudio. In the last few days I have encountered the following problem: the 'resume' part of my website renders improperly on my computer, ...
amcameron's user avatar
0 votes
0 answers
304 views

Is there a comprehensive list of devices affected by KV botnet malware infections?

According to this January 31, 2024 article in Ars Technica: Chinese malware removed from SOHO routers after FBI issues covert commands Routers were being used to conceal attacks on critical ...
Giacomo1968's user avatar
  • 56.1k
11 votes
1 answer
4k views

An unrelated program (Clash for Windows) links to FFmpeg libraries. Can it be spyware?

Update: today I found some decisive evidence on its misbehaviour. Sandbox analysis from VirusTotal on its installer reports video capturing capability using webcam. See the link to its analysis here. ...
Guanyuming He's user avatar
0 votes
2 answers
100 views

New Machine Compromised? Should I Care?

I have a ~brand-new (10 days since unpackaging) machine that had a funny pop-up (lower-right corner of below screenshot) appear just now. The only modifications I have made have been Install the ...
Ryan Farber's user avatar
0 votes
0 answers
110 views

Black screen after Windows logo. What is happening to my machine?

I downloaded a PDF version of a book from internet archives on my smartphone and transferred it to my PC via Bluetooth, read it for 10-15 mins, and then attended a call from a friend while my PC was ...
Qwerty's user avatar
  • 101
1 vote
2 answers
360 views

How to stop all web-workers? They're draining my battery

A great many websites leave "web workers" running in the background even after you've left their website and closed the browser tab. I'm told that the only way to kill them all is to clear ...
user avatar
0 votes
4 answers
2k views

How to fix/investigate Windows Defender detecting malware in the VSS snapshots for Firefox cached files?

Update: Seems solved as of March 4. I was able to remove the bypass (path exclusion in Defender) and perform backups without malware detection, even after re-accessing the site linked in the original ...
mins's user avatar
  • 1,021
3 votes
1 answer
308 views

Are spare sectors stored in a hard drive's Host Protected Area (HPA)?

I need to wipe some used hard drives before using them in case they contain malware. Is it safe to remove the host protected area? Is the HPA used to store spare sectors? It is only 1 MB but might ...
marksing's user avatar
0 votes
2 answers
1k views

Windows 10 CMD Command Prompt opens and closes for split second. Possible Malware?

Every now and then I get a random command window open and closes for a split second. I can't see what it is. But I'm assuming it is a scheduled thing. I just want to be safe. From the get scheduled ...
Patoshi パトシ's user avatar
0 votes
0 answers
68 views

Wireshark showing packet exchanges with unconnected IPs

Running Wireshark on a PC for network monitoring and I noticed something strange. Application data is being exchanged with websites that are not open in the browser, or on any other device on the ...
Instream's user avatar
0 votes
0 answers
21 views

Can guest access host clipboard despite sharing turned off?

Host: Win10 Guest: Linux Software: VirtualBox Clipboard information might not seem important, but it could very well contain a copied password or other useful data. On the host, clipboard history is ...
No Name's user avatar
  • 139
0 votes
0 answers
212 views

If a .gz file was downloaded can it demage my computer or steal data?

I was unaware that I was on a data phishing landing page (it was very clever, I haven't seen anything like this before) and I downloaded a .gz file. After that it started to become suspicius so I ...
Bálint Forgács's user avatar
0 votes
1 answer
642 views

urxvt prompt starts in the middle of screen and tmux shows gibberish when started from it

Lately I noticed that my terminal prompt on urxvt does not start on the first line when I open it, but on the middle of the screen. Also when later I execute tmux command to use tmux inside a urxvt ...
Kristi Begaj's user avatar
0 votes
0 answers
2k views

Strange window opens randomly and closes very quickly

It has been some time now that in Windows 11, I experience this weird issue: Now and then, I see a window (something bigger than a command prompt) opening and closing immediately. It has a blue color, ...
Stefano Capasso's user avatar
0 votes
2 answers
169 views

I bought an open-box laptop. Should I reset Windows?

Some time ago I bought a cheap laptop, essentially a netbook, to ensure that if my main laptop stopped working, I would have a laptop to work on while my main laptop was being repaired. The box for ...
Mitsuko's user avatar
  • 171
0 votes
1 answer
850 views

Can the boot USB get infected if PC is infected?

I want to create a Windows 11 boot USB stick. That's not the problem though as this is easy with the Microsoft provided tool. What I do want to know is, let's assume your computer is infected, you try ...
Idontknowbasics's user avatar
0 votes
1 answer
79 views

Is it possible to get infected while entering a mispelled url?

I accidentally mispelled hotmail, so instead of that I entered hotmoil(dot)com. I did closed fast my browser when I noticed but is it possible to be infected? I saw no new downloads and I am using ...
Idontknowbasics's user avatar
0 votes
1 answer
58 views

Why is limited access to file_system in Windows to prevent malware still not a thing? [closed]

It is 2023, and how do we still not have a proper solution to it? Android manages it very well by restricting important app_data files to each app, and apart from that android also has limited access ...
Someone's user avatar
  • 157
1 vote
0 answers
112 views

Is it safer to use a VM and VPN for working with other people's python scripts or executables?

I want to start taking freelancing jobs doing python programming, but I am new to working for others. I want to do everything I can to avoid scams and having my computer infected with malware. I know ...
Scarlett's user avatar
0 votes
2 answers
1k views

I am getting a weird error unauthorized changes blocked controlled folder access blocked OMApSvcBroker.exe . Do you think it is some sort of virus?

Here is the image below: I have run windows defender multiple times nothing shows up. I also ran RKill + Malwarebytes ADW cleaner + Hitman pro removal programs. The only thing I have not done in a ...
trewbth's user avatar
0 votes
0 answers
31 views

I can't use any of my antivirus, and none of it will load (or the websites) will load. help please [duplicate]

i cant go to an antivirus website, nor can i open malwarebytes because it says "The application was unable to start correctly (0xc0000017). Click OK to close the application." im aware that ...
pixel's user avatar
  • 1
0 votes
1 answer
240 views

Chrome trying to download something?

Lately my Kaspersky antivirus has been showing weird notifications ahout blocking download attempts made from Chrome because it contains adware and such. Here's the log: Event: Download denied User: ...
Rohith Rathod's user avatar
-1 votes
2 answers
84 views

"Windowns Setting": Result from Win 10 search bar

The question is whether the search bar result displaying an unlikely spelling error can be ignored or is a clue to the presence of something malicious. It began with my need to know more about ...
i YAM GzORM's user avatar
0 votes
1 answer
137 views

ISP Notice Regarding Infected Computer and Potential Disconnection

Recently, my parents received an email supposedly from the ISP (Internet Service Provider) stating that their computer is infected and if they don't take steps to clean it, they may face disconnection ...
eLAINe's user avatar
  • 1
0 votes
0 answers
45 views

PHP website getting hacked - dir names changed

I'm new to PHP and Apache. I come from Node.js/Java backends and I'm new to this tech stack (PHP, CGI, Apache etc). My site currently uses ckeditor to handle user uploads and has high traffic. Often, ...
Leonardo Santos's user avatar
0 votes
0 answers
473 views

Possibly Malicious code execution on startup

Checked my event viewer to see if my system was starting any funny commands. This is due to the fact i noticed a sudden slowdown on my pc after startup. Im wondering if an event like this is normal; ...
N S's user avatar
  • 19
0 votes
0 answers
61 views

Dotted transparent selection box appears after closing Word documents

When I close Microsoft Word files, this annoying dotted transparent selection box appears on my desktop home screen. When I close any other file type, a translucent selection box appears, which seems ...
Mattpats's user avatar
  • 121
0 votes
1 answer
1k views

Suspicious script meddling with /usr/bin/open

I'm on macOS Ventura 13.2.1 (22D68). I run a script in my computer and the outcome was pretty much as described in this post. So some files were installed to the /tmp/ folder, and the Opera browser ...
aaragon's user avatar
  • 103
0 votes
0 answers
111 views

Would it be possible to create a batch file or windows task for malware check?

Would it be possible to create a batch file or windows task that would monitor all drives for any new files showing up, calculate their hash and check virus total for malware flag, then if malware ...
insecureenthusiast's user avatar
1 vote
1 answer
128 views

Is situation (with GPG) possibly a malware attack?

I am taking care of an ubuntu server (22.04) and suddenly I was not able to access some files via FTP. I checked a few things and noticed a gpg root process consuming a lot of CPU. It kept restarting ...
Jorge's user avatar
  • 121
0 votes
1 answer
52 views

When AV software puts files and various malicious "objects" in "quarantine", what exactly do they actually do?

I had malware on a computer, which Malwarebytes managed to remove. Or did it? It rather "put it in quarantine". And it's remained like that. I see no way to actually delete it. This appears ...
C. Naslund's user avatar
0 votes
1 answer
4k views

What is “Service Host: Secondary Logon?” Is this a sign of malware?

I found the process “Service Host: Secondary Logon” running under windows processes in task manager, with command line file in system32 svchost.exe, which I‘ve found running under my username at least ...
user3709's user avatar
  • 119
0 votes
1 answer
141 views

Volume boot record virus infection

My pc have a RAT which survive after system format. It's fully undetectable from any antivirus software and av rescue disks ... I've tried to flash my BIOS. Then i used that command from linux ...
Zanarhi's user avatar
0 votes
0 answers
131 views

RunDLL and Regsvr32 Exploits - how to mitigate or stop? [duplicate]

I have installed Malwarebytes and Spyhunter 5 and run full scans and yet Malwarebytes still shows blocked calls to nefarious domains and IPs via regsvr32 and rundll32. Is there a way to find the ...
Jay Croghan's user avatar
0 votes
1 answer
843 views

Cannot delete a .dll file [duplicate]

I downloaded Internet Download Manager from a piracy website and after downloading I tried to install it. I read the instruction manual given with the file and followed it but later I couldn't install ...
Nazmul Hasan Shipon's user avatar
1 vote
0 answers
2k views

Found xmrig running on new server, is what I did to remove it enough?

I saw my server's cpu usage was at 100%, so I investigated a bit and found Xmrig running. This is a Vultr OpenLiteSpeed Django server. I had installed CyberPanel via the cyberpanel install script on ...
Vellutante's user avatar
1 vote
2 answers
243 views

Prevent any batch file from closing automatically

I am worried my machine may be infected with malware. When I first log in there are batch scripts that open and close automatically very fast. Is there a way to see what program(s) executed a batch ...
user avatar
0 votes
1 answer
2k views

Is ExpressVPN trying to install malware on my PC?

I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan: HEUR:Trojan.Win64.Reincarnation.gen Kaspersky'...
user0713's user avatar
0 votes
1 answer
820 views

How is it possible to be infected by a Trojan without downloading anything suspicious?

After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
Aqqqq's user avatar
  • 181
4 votes
1 answer
14k views

Suspicious Executable - Samsung Magician

I'm hoping someone may be able to give me some input on an executable I found running every time I boot up my PC. I use the Samsung Magician software which runs on startup, but it wasn't until today I ...
user1736545's user avatar
0 votes
1 answer
5k views

7zip program infected with malwares and viruses [duplicate]

7zip program infected with malwares and viruses. Virus Total scanned the installer as good with malicious and suspecious relations. The 7-zip program 7-zip v22.01 - (may be infected) From the Virus ...
smith john's user avatar

1
2 3 4 5
22