Questions tagged [malware]
Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.
17
questions
27
votes
3
answers
15k
views
Why are NginX and Lighttpd not affected by Slowloris?
I am investigating the vulnerability to Slowloris and I think I understand how and why this sort of attack works.
What I don't understand is why Lighttpd and NginX are not affected (according to the ...
11
votes
4
answers
816
views
Updating Malware cleaning skills
I have seen some sites offering 'Malware University', training classes on getting rid of malware. Do you think that updating your malware removal skills (or arsenal) is necessary from time to time? ...
9
votes
1
answer
2k
views
Is it possible to hide a malicious alias in Bash on Linux?
Is it possible to conceal the existence of a malicious alias in Bash on a Linux system and have it executed by the user without their knowledge?
7
votes
5
answers
360
views
Kids + older computers + our network at the office: Security risk?
On occasion, some of my coworkers feel compelled to bring their children to work with them. (I feel compelled to smack them, but that's probably a topic for Parenting.SE.) To ensure that the brats^H^H^...
1
vote
1
answer
101
views
Server infected by recent cryptojacking malware but different (?) entry point
One of my servers has been infected by this cryptojacking malware (reporting to the very same IP than in the article).
It seems known for this malware to propagate through some Confluence ...
62
votes
3
answers
16k
views
Unusual HEAD requests to nonsense URLs from Chrome
I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
8
votes
3
answers
4k
views
Can "wannacrypt" (wcrypt) spread via Linux server serving over SMB?
Is it possible, or will this only spread via a Windows machine serving over SMB?
If Linux serving over SMB can spread wannacrypt, what's the approach to take?
4
votes
5
answers
1k
views
Conficker: Should steps taken in group policy to secure against virus remain?
We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
4
votes
5
answers
6k
views
Best Open Source or Freeware Malware/Spyware/Antivirus with centralized management? [closed]
What are the best Malware/Spyware/Antivirus solutions?
Several requirements for the solution:
Open Source or Freeware
Centralized Management
Reporting and Remote Installation
Think spybot / ...
3
votes
2
answers
14k
views
Strange scheduled tasks on Windows Server 2003
A few days ago, I noticed that our Windows Server 2003 system has strange scheduled tasks. I do not know where they came from or who set them up. I deleted them and they came up again today. They have ...
2
votes
3
answers
488
views
Do I need to deploy antivirus and anti-spyware software to all the PCs on my network?
I am already using antivirus on all our PCs, and, of course, we're behind a firewall. Does anti-spyware software like adaware still provide an additional benefit, or does modern antivirus/firewall ...
2
votes
1
answer
2k
views
Find the source of malware?
I have a server that was running an older version of lighttpd (1.4.19 on a freebsd 6.2-RELEASE (yea, old) machine) and google alerted me that it had found malware embedded on one of my server's pages. ...
1
vote
2
answers
415
views
One machine blocked from a single server, and only when it's at this physical location?
I host an e-commerce website for a client who suddenly is unable to access it from his computer. He can ping the server, he can SSH in, but cannot load the website in any browser we've tried: IE, ...
0
votes
1
answer
2k
views
How to uninstall redis on Centos 8
How can i fully uninstall redis from my Centos 8 machine ?
I have a malware that keeps getting in via redis
41533 redis 20 0 5883224 4.4g 2776 S 1593 13.9 13507:24 kdevtmpfsi
0
votes
3
answers
3k
views
My website is infected with JS:ScriptIP-inf [Trj]
I am using Network Solutions hosting. I was recently attacked with JS:Illredir-S [Trj], I asked my hosting providers to clean it and they cleaned it and updated all passwords, but now after a week my ...
0
votes
4
answers
2k
views
Exchange 2007 server send out spam
Our exchange server is sending out spam, as it has been listed on various spam blacklist and not to sure know how to stop it.
I've started with verify SMTP with a site like http://www.pagasa.net/test-...
-3
votes
1
answer
241
views
How do I remove a rootkit without an anti-rootkit program? [duplicate]
Possible Duplicate:
My server's been hacked EMERGENCY
Windows 2000 Server.
I believe I have a rootkit. But, nothing will remove it. I've tried everything. Even tools that are merely for ...