Questions tagged [trojan]
A trojan horse is a type of malware that poses as benevolent software, while secretly installing other malware in your system.
127
questions
-4
votes
0
answers
49
views
Virus in program [closed]
My antivirus when running this program referred to the virus: Trojan:Win32/Bearfoos.BE!ml
The test was done on the website: tria.ge
I wanted to run this program, but my antivirus removed it. If ...
-3
votes
0
answers
34
views
What is TrojanSpy:AndroidOS/FakeSecSuite!pz
We have started getting this warning from Windows Defender for new builds of our apk.
TrojanSpy:AndroidOS/FakeSecSuite!pz
Searching the internet does give any hits, does anybody know what causes this?
0
votes
0
answers
250
views
BIOS has a password which I never set (Rootkit?)
Background info: our network was infected years ago by a hacker (loser stalker). I suspect he was using Remote Desktop, as the icon appeared when I unhid Windows items, like it had been used. I re-...
0
votes
0
answers
160
views
Windows 11 - Various .exe files closing themselves after execution
I'm running a system that runs Windows 11. The issue is, that whenever I open certain programs, they open and after 2-10s they close themselves. Between the 2-10s the programs are frozen and don't ...
0
votes
1
answer
915
views
Is ExpressVPN trying to install malware on my PC?
I have been using ExpressVPN for a while. Today when I was trying to update it to the latest version (10.36.0.4), Kaspersky detected the following trojan:
HEUR:Trojan.Win64.Reincarnation.gen
Kaspersky'...
0
votes
1
answer
542
views
How is it possible to be infected by a Trojan without downloading anything suspicious?
After conducting a full scan on my Fujitsu Windows 10 laptop yesterday (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A, with the detail "This program is dangerous ...
0
votes
1
answer
430
views
What does "Affected items" mean in the threat report of Windows 10 Microsoft Defender scan?
After conducting a full scan on my Fujitsu Windows 10 laptop today (Nov. 01, 2022), I got informed of this threat: Trojan:HTML/CryptoExtortBTC.A (I do not do anything about cryptocurrency. This seems ...
0
votes
1
answer
2k
views
Trojan virus threat 'removed or restored'
I recently downloaded a file from a malicious website by mistake. It had a trojan virus with the name as following :-
Trojan.win32.Zapchast
My windows defender detected the threat and then quarantined ...
0
votes
0
answers
28
views
Does anyone know how to remove "Trojan:HTML/CryptoStealBTC" from Windows 10 DELL laptop? [duplicate]
snip of the message from windows defender system
I have tried all ways to Quarantine, Remove the said threat from my system using Windows Security System. Still it is coming up as a threat to the ...
0
votes
0
answers
227
views
Instance of Windowsformapp repeatedly creates an executable in the temp folder called "Velo.exe" in Windows 10
Since yesterday, I have noticed that through Windows Form an application called Velo.exe creates many subfolders (2-3 per minute, see photo) in the Temp folder with the same file called Velo.exe ...
1
vote
1
answer
131
views
Should I do anything after formatting my computer because of malware infection?
Yesterday I realised that, after installing some software last weekend, Microsoft Defender was detecting several file on my Windows 10 document's temp folder. Some of them were deleted by the ...
0
votes
1
answer
2k
views
What’s the difference between rootkit and RAT? [duplicate]
I know that both can give attacker remote access to computer. Is RAT easier to detect than rootkit? Where are they typically get installed? Can one make more damage than another? Which one is easier ...
1
vote
0
answers
16
views
Some Virus is creating "Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\SqlManagement" folder again and again [duplicate]
c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\SqlManagement folder is creating again and again in our Windows server 2008 R2. SqlManagement folder contains some files with ...
0
votes
0
answers
214
views
Found a weird malware at weird location (Windows Defender -Detected : Trojan:BAT/MineBicoin.K & -Affected Item: boot:\\.\E:\)
I was using Ubuntu 20.04 (no dual boot) and after that I installed Official Windows 10 2020 version (even checked sha256sum of the iso file it was genuine) and then after it booted (partition remade ...
2
votes
1
answer
19k
views
What precautions to take after a trojan Win32/Occamy.C infection
Platform Details: Windows 10, 64 bit.
Infection History. I downloaded this cheat tool for a game. After that, I performed the following sequence of actions:
I extracted the software from the package ...
0
votes
2
answers
93
views
Windows Defender Trojan removal
Windows Defender Win10 removed a Trojan. I clicked allow, by mistake, to allow the trojan through the firewall in the future. I cannot find the Trojan in the list of allowed apps when I check the ...
1
vote
1
answer
2k
views
Best Way to Get Rid of Ceprolad.A [duplicate]
Well this is embarrassing... I was attempting to download a freeware tool and clicked on the wrong thing so I was blasted with tons of malware. Windows Defender seems to have gotten rid of some of ...
1
vote
0
answers
1k
views
I accidentally downloaded a Trojan:Win32/Occamy.C virus. I did not run the EXE. Am I safe? [closed]
So I have just downloaded a Trojan virus on accident. I did not run the EXE, and now the file is gone (I don't know if I deleted it or not, but it isn't in my recycling bin.) I ran a McAfee security ...
1
vote
1
answer
385
views
Do I Have a Trojan after Plugging in Hard Drive?
I temporarily fixed a family member’s hard drive so I could get the data off of it onto my computer. As I was transferring over the downloads, I had a windows defender message come up detecting a ...
0
votes
0
answers
297
views
Is my webcam hardwired?
I want to know if my webcam LED can be controlled by software (malware) or if it is hardwired. My understanding is that if a webcam's LED is hardwired it cannot be turned on by a hacker without the ...
0
votes
2
answers
1k
views
Windows 7 all files "access denied" after Trojan attack [duplicate]
Background: 500 GB HD began to max out, determined total folders/files should be approx 250 GB. I have Bitdefender but somehow a Trojan got by but finally found with HouseCall. Now all folders ...
0
votes
1
answer
43
views
Can TrueCrypt like software protect my external HDD from virus in svhost.exe modify my files on it?
A 'shurtcut to (1).lnk' virus infected 50 000 of my html files on an external HDD. If I will encrypt data on it, will it protect them from trojan process being run on behalf svhost.exe?
0
votes
1
answer
78k
views
"Hiren's Boot CD 16.2" vs. "Hiren's Boot CD 15.2"
I was looking for the latest HBCD and then I found this one: "Hiren's Boot CD 16.2" which seems to be the latest, however on their own website, they only have vs. "Hiren's Boot CD 15.2" not 16.2 ...
1
vote
3
answers
1k
views
Firefox shows 'Your Connection is not secure' while connecting to google.com
I reinstalled firefox and Kaspersky 17,and now I am geeting this message when trying to connect to google.com :
Sign of hidden malware?
My pc was infected and I reinstalled win 10 x64
0
votes
0
answers
97
views
macOS: Is it possible to find out who is intercepting my outgoing (HTTP) communication?
Quick question:
Is there any way to find out who or what process is intercepting outgoing HTTP connections on macOS?
Details:
Environment: macOS Sierra
When trying to open pretty standard web ...
1
vote
2
answers
351
views
How can I track which software/process stops the windows firewall?
Something stops the windows firewall.
If I restart it, it is again stopped within 2 minutes.
How can I track which software/process stops it?
Or how to configure the event manager in order to track ...
-2
votes
1
answer
208
views
Format and encrypt compromised USB stick with TrueCrypt to make it clean again?
Let's say I bought an used USB stick from a very professional hacker who has compromised the stick with really professional methods, the NSA or FBI would use to compromise it: Would it be safe to ...
0
votes
1
answer
119
views
Network detects trojan on my device, Malware/avast can't find it.
I am a new uni student, I got an email from my uni network that they have detected Win.Trojan.Hadsruda on my laptop (they sent my mac address). And if I don't remove it in one day, they will lock my ...
0
votes
1
answer
3k
views
How did I contract Skeeyah.A!bit
Windows Defender just informed me it had placed the trojan Win32/Skeeyah.A!bit in quarantine. It was first found yesterday and now again today. How did I contract that? My download history reveals ...
0
votes
1
answer
1k
views
Kaspersky detects Java.exe as a virus, is this a fault?
Kaspersky detected Java.exe as a virus (Apparently Trojan.Win32.Generic)
Is this a fault or is this seriously a virus?
1
vote
1
answer
1k
views
Avast keeps showing this virus error
I don't remember entering any "funny" website and this virus warning seems to pop-up at random once every day, anyone know what it is? How can I fix it?
Object: http://mst.my03.com:8080/k.zip | [...
0
votes
2
answers
177
views
Data encrypted by LOCKY virus [duplicate]
Is there any way to decrypt the data which is affected and encrypted by locky ransomeware hackers. one of our companies system (windows 7) is affected. i have Ubuntu installed on my PC. please help ...
0
votes
1
answer
4k
views
wired TCP/IP communication under system idle process
I used Process explorer to view system idle process details. Under the TCP/IP tab i found a wired communication
its like this:
I have updated paid license of ESET Smart Security 9 and it shows ...
0
votes
1
answer
123
views
Mother-in-law fell for a "Windows support" scam. Can I save her laptop? [duplicate]
My mother-in-law fell for a Windows scam. Apparently a window popped up telling her that her computer had a virus, and she should call this number where they would clean it up for her. To cut a long ...
0
votes
1
answer
77
views
Sure way to get rid of a trojan [duplicate]
I think I have a trojan.
svchost.exe is consuming %25 cpu all the time, and my Microsoft Security Essentials reports a different virus every half an hour or so. From what I understand the trojan is ...
1
vote
2
answers
1k
views
Teraterm with trojan?
I have a program called Teraterm that have some little applications like keycode.exe which it is supposed to configure the keyboard to my liking but Microsoft Security Essentials detect it as a Trojan....
0
votes
0
answers
363
views
Why is my Antivurus finding a virus on StackOverflow?
This came as a total surprise to me.
I am using Avast Antivirus 11.1.2253 with virus definitions version 160330-3 on a Windows 8.1 and a Firefox browser.
The issue: While reviewing some SO ...
3
votes
3
answers
2k
views
Norton Security Blocking Trojan.Gen.SMH (github.exe)
I've been using GitHub Windows App for several months and now Norton Security is blocking it because it's assuming it's a trojan (Trojan.Gen.SMH to be exact). I removed it from the quarantine but I ...
1
vote
1
answer
1k
views
How to find vulnerabilities in ubuntu services? [closed]
I have an ubuntu server running. Today I found that the server got hacked and is being used for DDoS through amazon abuse report.
I found the following things on the server.
The following suspecious ...
506
votes
9
answers
57k
views
Did I just get hacked?
I am developing a consumer product, and it is supposed to be connected to the Internet, so as expected, it is connected to the Internet so that I can properly develop it.
I went away for an hour or ...
3
votes
2
answers
3k
views
localhost redirect to other site... trojan?
As title, seems there's a trojan on my server
When I put a url like
localhost/mysite
it redirect to the site free-merchants.com and then return to my site...
But if I put
127.0.0.1/mysite
all ...
1
vote
1
answer
9k
views
Router logs show constant unknown port mapping (forwarding)?
Do I have a virus or trojan? Should I be worried? What’s going on here? I’m currently running Debian, and there are records like this for every day since these first records showed up. I ...
0
votes
2
answers
23k
views
"svchost.exe (LocalServiceAndNoImpersonation)" - Is this a virus/trojan?
Looking at the screenshot you can find that there are two svchost.exe.
One is svchost.exe (NetworkService) and other is svchost.exe (LocalServiceAndNoImpersonation)
svchost.exe (...
1
vote
1
answer
289
views
Wordpress Trojan Removal: How do I use find/sed -i/awk to remove the line containing "$ua=strtolower" from *.php* recursively?
A trojan has infected all *.php on my server.
I used this to identify and list all the files:
grep -nHR "$ua=strtolower" /www/* | cut -d':' -f1
Here is the code:
<?php if(!isset($GLOBALS["\x61\...
1
vote
3
answers
2k
views
How can I safely do a complete hard disk drive wipe and Windows 7 reinstall due to a virus? [duplicate]
I have a Dell inspiron 1545 running Windows 7 professional and I have recently fallen victim to a Trojan virus that has somehow managed to surpass AVG, ZoneAlarm and Malwarebytes too!
I have tried ...
3
votes
1
answer
13k
views
Trojan au_.exe - how to get rid of it [duplicate]
I installed the popular software 'Synthesia' from its official website. It is a program for piano transcriptions. It has always been safe.
I decided to uninstall it and as soon as I uninstalled it, a ...
2
votes
2
answers
254
views
How do I delete files that are locked when no other app can delete them?
So I found out that I had a Trojan on my external hard drive. My anti-virus app killed it, but it has created a bunch of random files on my computer which cannot be deleted. These are image files. ...
-2
votes
1
answer
2k
views
Can i get virus/trojan from cracked software when my windows is installed with avg 2015 [closed]
One of my colleages says that he is free from virus/trojan from cracked softwares as long as the PC has AVG 2015 free edition installed.
Is it correct?
0
votes
2
answers
704
views
How can I monitor my internet traffic while infected with trojan or rootkit?
How can I monitor my internet traffic while infected with trojan or rootkit ? Which application should I use ?
0
votes
1
answer
830
views
How to remove "Ad by browser shop" Ad from browser
How can I remove this Ad? I get it in all pages. I try to clean it with Spybot Search and Destroy but not working.