Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
27 votes
3 answers
15k views

Why are NginX and Lighttpd not affected by Slowloris?

I am investigating the vulnerability to Slowloris and I think I understand how and why this sort of attack works. What I don't understand is why Lighttpd and NginX are not affected (according to the ...
The Shurrican's user avatar
11 votes
4 answers
816 views

Updating Malware cleaning skills

I have seen some sites offering 'Malware University', training classes on getting rid of malware. Do you think that updating your malware removal skills (or arsenal) is necessary from time to time? ...
Terry's user avatar
  • 1,073
9 votes
1 answer
2k views

Is it possible to hide a malicious alias in Bash on Linux?

Is it possible to conceal the existence of a malicious alias in Bash on a Linux system and have it executed by the user without their knowledge?
Dennis Williamson's user avatar
7 votes
5 answers
360 views

Kids + older computers + our network at the office: Security risk?

On occasion, some of my coworkers feel compelled to bring their children to work with them. (I feel compelled to smack them, but that's probably a topic for Parenting.SE.) To ensure that the brats^H^H^...
eckza's user avatar
  • 283
1 vote
1 answer
101 views

Server infected by recent cryptojacking malware but different (?) entry point

One of my servers has been infected by this cryptojacking malware (reporting to the very same IP than in the article). It seems known for this malware to propagate through some Confluence ...
Skippy le Grand Gourou's user avatar
62 votes
3 answers
16k views

Unusual HEAD requests to nonsense URLs from Chrome

I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
JeremyDWill's user avatar
8 votes
3 answers
4k views

Can "wannacrypt" (wcrypt) spread via Linux server serving over SMB?

Is it possible, or will this only spread via a Windows machine serving over SMB? If Linux serving over SMB can spread wannacrypt, what's the approach to take?
fredrik's user avatar
  • 751
4 votes
5 answers
1k views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
Peter Turner's user avatar
  • 2,278
4 votes
5 answers
6k views

Best Open Source or Freeware Malware/Spyware/Antivirus with centralized management? [closed]

What are the best Malware/Spyware/Antivirus solutions? Several requirements for the solution: Open Source or Freeware Centralized Management Reporting and Remote Installation Think spybot / ...
JJ01's user avatar
  • 461
3 votes
2 answers
14k views

Strange scheduled tasks on Windows Server 2003

A few days ago, I noticed that our Windows Server 2003 system has strange scheduled tasks. I do not know where they came from or who set them up. I deleted them and they came up again today. They have ...
adopilot's user avatar
  • 1,531
2 votes
3 answers
488 views

Do I need to deploy antivirus and anti-spyware software to all the PCs on my network?

I am already using antivirus on all our PCs, and, of course, we're behind a firewall. Does anti-spyware software like adaware still provide an additional benefit, or does modern antivirus/firewall ...
user avatar
2 votes
1 answer
2k views

Find the source of malware?

I have a server that was running an older version of lighttpd (1.4.19 on a freebsd 6.2-RELEASE (yea, old) machine) and google alerted me that it had found malware embedded on one of my server's pages. ...
jps's user avatar
  • 123
1 vote
2 answers
415 views

One machine blocked from a single server, and only when it's at this physical location?

I host an e-commerce website for a client who suddenly is unable to access it from his computer. He can ping the server, he can SSH in, but cannot load the website in any browser we've tried: IE, ...
rymo's user avatar
  • 513
0 votes
1 answer
2k views

How to uninstall redis on Centos 8

How can i fully uninstall redis from my Centos 8 machine ? I have a malware that keeps getting in via redis 41533 redis 20 0 5883224 4.4g 2776 S 1593 13.9 13507:24 kdevtmpfsi
Jack Duldi's user avatar
0 votes
3 answers
3k views

My website is infected with JS:ScriptIP-inf [Trj]

I am using Network Solutions hosting. I was recently attacked with JS:Illredir-S [Trj], I asked my hosting providers to clean it and they cleaned it and updated all passwords, but now after a week my ...
user avatar
0 votes
4 answers
2k views

Exchange 2007 server send out spam

Our exchange server is sending out spam, as it has been listed on various spam blacklist and not to sure know how to stop it. I've started with verify SMTP with a site like http://www.pagasa.net/test-...
Mofoster's user avatar
-3 votes
1 answer
241 views

How do I remove a rootkit without an anti-rootkit program? [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY Windows 2000 Server. I believe I have a rootkit. But, nothing will remove it. I've tried everything. Even tools that are merely for ...
johnny's user avatar
  • 2,348