Questions tagged [malware-detection]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

Chrome opening links after prefixing with another domain [duplicate]

So, I was browsing through Chrome for something around three days ago in Google, and when I clicked a search result, noticed a weird think happening in the URL bar. Generally, clicking a link shown in ...
0
votes
0answers
38 views

Can Virus infected USB drive spread while booting Windows

I want to know that, if I connected computer malware infected USB drive to a Window laptop, while its booting, that malware can spread on that PC? (without opening USB drive via file manager). This ...
0
votes
0answers
15 views

How to setup the virusscan feature in winrar with malwarebytes?

When you open the virus scan feature in winrar it does not automatically detect malwarebytes. But there is a user specified option. How do you set it up so it scans with the antivirus malwarebytes?
0
votes
0answers
38 views

Can't discover the source of virus. Faulty dll is causing many windows pop up

Attached here some samples of faulty bug report windows which pop up occasionally. Nvidia Container: Problem signature: Problem Event Name: BEX64 Application Name: nvcontainer.exe Application ...
0
votes
1answer
189 views

pestudio no longer uploading signatures to VirusTotal

For years, I've used pestudio to check executables for malware, and recent versions of pestudio have included the ability to upload a file signature to VirusTotal (VT). However, for the past few weeks,...
1
vote
2answers
276 views

Strange requests from localhost in Apache access logs causing server to crash

I recently setup a Ubuntu 18 testing server on a cloud VPS host and installed the latest Wordpress. Today I went to log in and the site will not load - I get an error Error establishing a database ...
1
vote
0answers
13 views

How to investigate why Windows game is cutting off Wifi to everything?

One member of the household downloaded a game through Windows Apps. Whenever they play the game, all other devices connected to the Wifi router cannot use the Wifi. They show an active connection, but ...
0
votes
0answers
27 views

Hash changes just after operning a PDF file

Is it possible or normal that the hash value of a document changes just after the first opening of it? I used sha256sum function within Ubuntu terminal to check the hash values before and after the ...
1
vote
1answer
30 views

How do I find which extension is modifying my website?

So, I noticed some other posts related to this (such as Full-page ads randomly pop up in Chrome ("Sponsored by")); however, since I have an extension that is only injecting an ad once in ...
1
vote
2answers
484 views

Unknown Process sustse/kworkerds running on servers

We have noticed Unknown Process sustse/kworkerds running on CoreOS servers this was identified as Cripto malware, Followed below article but not helpfull, killed process and deleted the file in temp,...
0
votes
0answers
65 views

Antivirus keeps flagging a file as trojan in recovery partition - false positive?

My antivirus software keeps constantly detecting a file as Trojan.IGeneric The file path goes like this - D:\preload\install17.swm/noname.xmp/PDMgr.dll The D drive is my recovery partition. And upon ...
1
vote
0answers
847 views

How to investigate and remove Trojan:EC2/DGADomainRequest.B

My GuardDuty management console on Amazon shows that my server is infected with malware: "EC2 instance i-7e1d4356 is querying algorithmically generated domains. Such domains are commonly used by ...
0
votes
2answers
921 views

Virus scanning a compressed file before vs after extracting

If I download a compressed file (i.e. a zip file, etc), does it make a difference if I: a) virus scan it as is vs. b) virus scan after extracting it? What are the differences/considerations if I ...
2
votes
0answers
852 views

Windows Defender reports Fuerboos.C!cl threat inconsistently

I'm not sure of the appropriate forum for this question since it kind of sits between programming and general computer use, but I'll try here because it has nothing to do with code yet. I've been ...
0
votes
0answers
141 views

Extensions (Chrome etc.) sending browsing data, is it theoretically possible to prevent that?

Chrome's chrome://extensions/ say "Warning: Google Chrome cannot prevent extensions from recording your browsing history" when enabling the [x] Allow in incognito. It seems to imply that uploading the ...
0
votes
1answer
227 views

I updated Chrome through brew cask and getting suspicious behavior

I have updated my Google Chrome to version 59.0.3071.115 by using: brew cask reinstall google-chrome and now when I start chrome, it opens two tabs with these URLs: http://www.prosoftwarepc.com/...
-1
votes
1answer
128 views

Where to look for Addonjet infection on Chrome/Windows 10?

I have the following symptom of Addonjet infection showing up randomly on my Windows 10 system: However, I search for ways of eliminating it and the solutions proposed make no sense. I find nothing ...
2
votes
1answer
484 views

Hundreds of thousands of folders in Windows 10 user temp folder

I noticed last week it took a while to open a group of PDFs on my computer. I had a look in %userprofile%\appdata\local\temp and I found well over 800,000 folders. I had to delete them with a for loop ...
0
votes
1answer
520 views

Spontaneously appearing and disappearing command line windows in Windows 10 [duplicate]

I run Windows 10 (Version 1607, Build 14393.969) with up-to-dated Bitdefender Total Security 2017 and MalwareBytes Anti-Malware Home (Premium). There is no pirated software installed on the computer. ...
-1
votes
1answer
529 views

Google searches in Internet Explorer redirects to cse.google.com

In Internet Explorer under Windows 10 Pro, Google searches suddenly redirects to cse.google.com. This wasn't happening previously, and this problem does not occur with Firefox. Google searches with ...
0
votes
0answers
66 views

File analysis for potential malware in a fresh VM?

If I wanted to find out if a file is truly a virus, and not just a false positive, I'd imagine I would need to run the file in a fresh windows VM and track all changes made to the entire OS post-...
0
votes
1answer
113 views

A malware in Mozilla, An URL opens automatically? [duplicate]

Some times when I open a site in Mozilla, a URL that starts with vadabzauefrpph4xraz8ewblhsbsbxkfq7sx8d9me4nuemgnx2yt5cnyfzzlxek.com will replace with the site's URL, What should I do to solve this ...
4
votes
0answers
2k views

Is this a ransomware?

I just got this window on my main computer: Apparently, it's from Windows. I checked, and the process EXE file is the original one (efsui.exe or something like that). However, I don't use EFS (I ...
1
vote
0answers
298 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
4
votes
0answers
347 views

How to protect Linux from Ransomware by detecting mass changes?

I wonder if it would be possible to stop running ransomware on a Linux system by detecting mass changes on files. Can watchdog or entr or inotifywait be used to detect bulk file changes and stop what ...
1
vote
2answers
149 views

Is my anti-malware setup consistent with “best practices”?

A few days ago, my PC was acting weird and froze sometimes. I did full scans using Avast! Free Antivirus and Malwarebytes Anti-Malware since I assumed it was a virus causing these, but both software ...
13
votes
1answer
5k views

uTorrent - adware / malware on download and install - Mac OSX Yosemite

I recently downloaded uTorrent (for the more ethically concerned: to get a wikipedia data dump as the official download server kept terminating my download, not to rip off copyright holders...), and ...
0
votes
1answer
99 views

How can I see what changes malware made to a virtual machine?

I want to know if I can open a virtual machine (VMware , Virtual Box ...) and (for example) install windows 7 + some programs (chrome,Word,antivirus....) and then save the current stat (i don't have ...
0
votes
0answers
39 views

How to prevent sotware installation in Windows10 w/o asking machine password

Recently I upgraded to Windows10 and my brother did some downloading of books which brought some malwares too like mystarsearch engine, AnyProtect etc... Even after un-installing from Contol Panel it ...
0
votes
1answer
18k views

Why my website giving “The site ahead contains harmful programs” error? [closed]

My site is: hints.steptoinstall.com. It's build using Wordpress. My lastest Post is: PHP – Current Year for Copyright, after making this post for the last 5 days I'm getting The site ahead contains ...
0
votes
0answers
673 views

how to detect and eliminate suspicious activity on the computer

I have a particularly weird problem on my Windows 7 desktop pc running on an Intel CPU with a Gigabyte motherboard and CorsAir smps. Here are a few observations which might be connected to the bigger ...
0
votes
0answers
385 views

How does one know a DLL is actually safe to use?

I've downloaded a certain DLL from the web and then uploaded it to Jotti's virus scan. All of those engines reported Found nothing. Nothing. Can there still be some sort of security issue with this ...
0
votes
1answer
214 views

Random audio ads [duplicate]

Audio ads appear at random and last for around 5-10 seconds before turning off. I've run spy-bot on my entire system and still ads appear. No recent program installations are appearing either. Any ...
0
votes
1answer
344 views

Why does this program give a Windows 8 SmartScreen warning?

Why does this program http://creativeadept.com/download-spintax-editor/ give me a SmartScreen warning in Windows 8 when a Malwarebytes scan and Windows Defender scan found nothing? What is wrong ...
7
votes
2answers
3k views

csrss.exe anomalies, is this a rootkit?

I'm seeing a strange anomaly in some systems I support. GMER flags the cdd.dll thread in csrss.exe, and when I run Process Explorer with Elevated Admin rights, I am: unable to view any loaded DLLs ...
0
votes
1answer
684 views

Catching malware and demonstrate it through windows logs

I need to catch a virus/malware on purpose on a VM and demonstrate the infection through windows logs analysis. I am using both syslog and eventlog analyzer, but no sign of events logged. I caught on ...
-2
votes
1answer
56 views

Post-Infection Analysis of Suspected Keylogger

I've recently downloaded and ran a file, which I now suspect might be a keylogger. I am wondering how can I tell if this file is a keylogger? I can provide a link to the file if anyone would be able ...
0
votes
0answers
83 views

4GB temporary system files showing up on desktop for no understandable reason

There are 4GB temporary system files called "BITEA#.tmp" e.g. BITEA5.tmp showing up on my Desktop folder just this last week. Does anyone know if this may be caused by malware recording screen or ...
0
votes
1answer
893 views

How do I scan Firefox on Ubuntu Linux for malicious JavaScripts?

I run Ubuntu Linux in a VirtualBox VM. I was browsing using Firefox, and I always use Adblock Plus with default configuration (EasyList) and NoScript. Then my VM lagged(mouse badly out of sync with ...
0
votes
1answer
46 views

How to determine if / ensure that a second-hand storage device is safe to use?

I am going to buy a SSD from someone who works in the same company, but even so is a complete stranger to me. Maybe I am a little paranoid, but is there a way to check if it is safe to use? Or is ...
8
votes
4answers
21k views

How can you find out if xlsx and docx files are safe to open?

I have received an email from a not entirely trustworthy source, it might be legit but I'm not really sure. It contains, among other things, information on a .docx Microsoft Word file and a .xlsx ...
0
votes
0answers
2k views

Security Essentials (SE) hangs while scanning ProgramData folder

First I did a complete scan on C:\ and kept getting (after about 1.5M files scanned, which is at the end of the C:\ProgramData folder or the beginning of the C:\Recovery folder) Then, after scanning ...
2
votes
0answers
1k views

Detect and remove malicious malware chrome extension that opens many tabs with ads

I observed throughout the day yesterday three episodes where my processor gets hijacked for a minute and the memory gets maxed out (12 gigs). The culprit was a seemingly infinite number of tabs being ...
0
votes
1answer
153 views

How to detect unwanted Firefox add-ons?

I have a Firefox add-on that seems to inject ads on the top of the pages when I'm using search engines. For example, for a search on hard drive on Google.com, I have this banner on top: You may ...
2
votes
4answers
10k views

How can I remove http://p.chango.com/static/c.js from my site?

I found some code injected somehow on my site. It links to <script src="http://p.chango.com/static/c.js. How can I get rid of it? Is this coming from my browser? Mind you, I see it in different ...
0
votes
4answers
6k views

High memory usage on Windows 7 unable to open browser

I switched on my laptop at 9 o’clock this morning and it is now 14:00 hours, where in after a series of reboots, hard or soft, I am able to open my browser. I opened a notepad and noted down ...
2
votes
1answer
2k views

Prevent Browser Search Hijack

What is the best way to prevent my browser's default search being hijacked? Also, what is the quickest/easiest way to clean up this sort of hijack? I just had to clean off all the browsers on my ...
1
vote
2answers
4k views

Monitor windows startup process

My win7 starts up pretty slow lately. I think it's some kind of malware, but my antivirus software doesn't pick up anything. How could i monitor the startup processes myself? It seems to me like ...
6
votes
2answers
3k views

What's the difference between traditional and heuristic virus scanning?

I just got off the phone with one of the major AV companies as to why a lesser known AV caught a virus that theirs didn't. The details of that delima are not important. What caught my attention ...
3
votes
2answers
37k views

what does it mean for MalwareBytes to find malicious registry keys but nothing else?

I have a machine that is obviously infected, and when I ran MalwareBytes it told me that it found some "malicious" registry keys (surprisingly enough these contained file path to currently non-...