Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

0
votes
2answers
276 views

Heeeelp! False positives from ZoneAlarm Force Field on my website will scare users away

I recently helped create a website for a conference that I am helping to host. We mailed out about 30,000 brochures and are expecting the big wave of traffic to start in a day or two. However, we keep ...
1
vote
3answers
262 views

NAT or proxy against malicious software

I had this conversation with a colleague about preventing viruses/trojans from accessing the internet from within a corporate network. He says that a proxy server for http traffic with an unusual port ...
0
votes
2answers
541 views

Malicious Script on LAMP Server

We have recently noticed that a malicious script is inserting itself in a number of PHP and HTML files on our domain questoons.com and the various add-on domains hosted on this account. The script ...
2
votes
5answers
238 views

Do you maintain an OMG it's !@#$ed CD with Utilities to recover and clean computers? What is on it? [closed]

I'm getting ready to build one with some of the common apps I use including malwarebytes, Spybot, and memtest86 . What elese do you recommend I add? Is there a single CD image out there that has all ...
0
votes
2answers
1k views

Unable to browse internet after virus infection (AntiVirus Pro 2010)

Some users on our network were infected recently with the AntiVirus Pro 2010 virus. The users disabled the anti-virus to install an application that resulted in AntiVirus pro being installed on the ...
0
votes
1answer
48 views

Removing a control kit from the server

The server my site is on was infected using the (pardon my obfuscation) Y-E-S E-x-p-l-o-i-t S-y-s-t-e-m It is a "control kit". I found out some info about it from ...
3
votes
2answers
218 views

My website is infected, I restored a backup of the uninfected files, how long will it take to un-mark as dangerous?

My website www.sagamountain.com was recently infected by a malware distributor (or at least I think it may have been). I have removed all external content, google ads, firefly chat, etc. I uploaded ...
9
votes
1answer
702 views

Is it possible to hide a malicious alias in Bash on Linux?

Is it possible to conceal the existence of a malicious alias in Bash on a Linux system and have it executed by the user without their knowledge?
1
vote
5answers
406 views

Is my server being hacked? [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY I got this weird page, which I am very sure was not created by me: <iframe src="http://a.bad.site:8080/ts/in.cgi?pepsi106" ...
1
vote
1answer
38 views

malicious files

can virus's/spyware/malware/trojans/worms get on your remote desktop/terminal services servers from a local machine?
1
vote
2answers
681 views

Best practices for isolating malware/honeypot samples

I am pursuing malware research and am wondering what are the best practices for building safe VM's to contain the code while disassembling it. So far: Each instance for examining the code is housed ...
1
vote
1answer
755 views

Remove eml and HTML:Nimda viruses from my Linux machine

(yes, the title is strange, but read on...) I copied some data from here and there on my linux box and now i find some many eml and HTML:Nimda viruses on my system when i scan it using clamtk. ...
1
vote
3answers
160 views

Is it normal for port 23 to be connected to periodically?

While working at a customer site (a LAN that includes several Windows machines, plus our server) I noticed that something was periodically attempting to connect to our server on port 23 via TCP. ...
2
votes
5answers
992 views

What is the process of cleaning viruses from a network?

We have a problem with a network virus that spread through our network and most computers have been infected. What should I do to remove the virus? By installing and scanning anti-virus software, the ...
5
votes
8answers
3k views

How can I test if a website is infected with malware?

Some friends of mine have a website (www.kennelsoffie.dk) and I'm trying to help them when there is any trouble. However this time I, can't figure it out. When I visit the site using Google Chrome, ...
6
votes
12answers
748 views

Hardening a financially critical Windows computer

One of the risks to small and medium businesses is losing your bank credentials to bad guys by use of a key logger or other malware as Bruce Schneier blogs about. A particular threat is real-time key ...
3
votes
2answers
10k views

Strange scheduled tasks on Windows Server 2003

A few days ago, I noticed that our Windows Server 2003 system has strange scheduled tasks. I do not know where they came from or who set them up. I deleted them and they came up again today. They have ...
0
votes
1answer
2k views

Resolving the “Windows cannot access the specified device path or file” error

A user is reporting they might have a virus, although it might be related to their reinstalling zone alarm. I don't physically have access to the computer though. They are running Windows XP. When ...
0
votes
2answers
238 views

Symantec - Flagging every local HTML file on my computer as a virus

I just ran Symantec Anti-Virus and it's flagging literally every since HTML, PHP, ASP/ASPX file on my computer as a virus. That's nearly 600 files on my laptop. Can this be? How can a text file ...
1
vote
3answers
261 views

XP Pro SP3 unresponsive requires power down

New to serverfault, but searched google and the forums here and haven't found anything regarding my issue. I have two laptops in my network that are displaying similar issues. They are from different ...
2
votes
4answers
374 views

Website attacked with a hidden iframe (q5x.ru)

A website of mine has recently been infected with some sort of attack that involved injecting a hidden iframe, and it's source was from a site q5x.ru (do not link). A Google search didn't help me in ...
12
votes
13answers
5k views

Make browsing safe for porn surfers

At several places I've done some work at, I have a suspicion that some of the executives browse porn on their work computers. It appears this porn surfing has lead to virus infections on their ...
0
votes
3answers
155 views

Site harmed by malware -or is it a server problem?

I have a site which is got harmed by this "spywarepc.info" and showing "Your site has been attacked by a Malware" :( ... don't even know what is this ? so i have opened spywarepc.info in a ...
0
votes
2answers
408 views

How do you remove the “ffsearcher” trojan?

Does anyone have any experience in removing the ffsearcher trojan. One of our systems is infected. The virus scanner doesn't detect it, but our websense program is detecting all the internet ...
-1
votes
6answers
188 views

*nix live CD to recover Vista host? [closed]

A friend of mine got his Vista PC infected by a virus. Before I tell him to just reboot with the maker-provided recovery DVD and lose all his data, is there a recommended Linux/*BSD live CD that he ...
10
votes
4answers
723 views

Updating Malware cleaning skills

I have seen some sites offering 'Malware University', training classes on getting rid of malware. Do you think that updating your malware removal skills (or arsenal) is necessary from time to time? ...
10
votes
5answers
2k views

Prevent execution of Windows executables

Is there any way to tell Windows (XP and above) not to execute files (*.exe files), which are present in drives/folders other than certain folders, that I mention? In short I want executables from ...
1
vote
7answers
2k views

I am starting to think that Prevx.com isnt a legit site…but heres my long-winded question

I apologize in advance for the long-winded post. I posted it all because I believe its informative and may be useful. Also, I posted my question at the end. Moments ago I was RDC to a file server ...
3
votes
10answers
1k views

google result redirect virus

I'm not so sure if this is the appropriate place for this, however I accidentally clicked this link which opened a video and infected my windows 2003 std server with this virus which not only creates ...
1
vote
11answers
265 views

Bad results from malware cleanup tools?

As there's already a wiki regarding cleanup tools, are there any tools that have given you negative results (i.e. made the system worse)?
3
votes
1answer
287 views

Google Web History shows

Google Web History Trends is showing URLs such as the following for 4 out of 10 of my Top Clicks (including the top 2): http://ocean2-4979731.org/page/0.volume ...
7
votes
5answers
26k views

how to find out what created a file?

I have some virus files being randomly created on root of a c: disk of one of my servers. How can I find out what created it? Some 3rd party software maybe?
3
votes
2answers
1k views

How do I repair dhcp service after conficker infection on Windows 2003 Server?

How do I repair dhcp service after conficker infection on Windows 2003 Server? If the server is restarted with DHCP then it keeps attempting to acquire a network address. It seems to work fine if ...
4
votes
5answers
4k views

Best Open Source or Freeware Malware/Spyware/Antivirus with centralized management? [closed]

What are the best Malware/Spyware/Antivirus solutions? Several requirements for the solution: Open Source or Freeware Centralized Management Reporting and Remote Installation Think spybot / ...
2
votes
2answers
245 views

Data Execution Prevention has closed the program Ms08n.exe

I've got a Windows2003 server which I rebooted recently, and now is nagging me about Data Execution Prevention having closed the program "Ms08n.exe". When I press "close message", the dialog just ...
1
vote
2answers
264 views

Cleaning Thunderbird Inbox of old viruses

I am running BitDefender and it seems to be picking up stuff that Norton never mentioned. The problem is that BD reports a number of old viruses in my inbox that it says it can't disinfect because ...
1
vote
4answers
230 views

Why are there unknown URLs in router log?

I recently looked at my router log. Why are a lot of requests that I don't send originated from a computer in my home network? They do not look like 3rd-party advertisements / images embedded in a ...
2
votes
6answers
287 views

Do my macs need anti-virus/ malware products?

This caused flame war in my Mac Users group, but the recent advisory that Apple released and then pulled suggesting using Anti-virus products. My take is that it's worth being safe rather than sorry, ...
4
votes
3answers
460 views

Some questions about the Microsoft Windows Malicious Software Removal Tool (MRT)

Does this program automatically run? If so, when and how often? Is it automatically updated? How do you disable it? How can you tell if it is running? What versions of Windows is it installed on?
4
votes
5answers
862 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
10
votes
6answers
13k views

What is the best way to find Conficker infected PCs in company networks remotely?

What is the best way remotely to find Conficker infected PCs in company/ISP networks?
2
votes
4answers
276 views

What is the best way to deal with spam or virus infected hosts in wireless network with personal laptops?

What is the best way to deal with spam or virus infected hosts in wireless network with personal laptops (like personal students laptops in university)? What polices and tools use your company?
2
votes
3answers
458 views

Do I need to deploy antivirus and anti-spyware software to all the PCs on my network?

I am already using antivirus on all our PCs, and, of course, we're behind a firewall. Does anti-spyware software like adaware still provide an additional benefit, or does modern antivirus/firewall ...