Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

"Malware" is a portmanteau of "malicious" and "software"

Common forms of malware include:

  • Botnet clients, which grant the malware author some degree of control over the compromised operating system and are generally employed in sending spam e-mail and may be rented out to perform DDoS attacks.
  • Data exfiltrators, which collect and transmit data about the computer they reside on back to the creator. These are commonly used to target login and account details for financial, social networking, and gaming websites.
  • Rogue Utility Applications, which attempt to use scare tactics in order to entice the computer's user to purchase the "full version" of the Rogue Utility.
  • Adware, which causes advertisements to appear on the user's desktop, in webpages, or elsewhere.
  • Rootkits, which attempt to conceal the presence of both the root kit and (usually) an accompanying piece of malware from another category from standard system tools and diagnostic utilities.
333 questions
0
votes
1 answer

Cleaning up after my Docker container got hit with the Kinsing malware

I have a VPS where I run an instance of devilbox, a dockerized LAMP stack. I just discovered that I got hit with the Kinsing malware, due most likely to a dockerized Redis server that I inadvertently left expose without a password (insert facepalm…
PaulJ
  • 151
  • 5
0
votes
1 answer

How to uninstall redis on Centos 8

How can i fully uninstall redis from my Centos 8 machine ? I have a malware that keeps getting in via redis 41533 redis 20 0 5883224 4.4g 2776 S 1593 13.9 13507:24 kdevtmpfsi
Jack Duldi
  • 19
  • 9
0
votes
1 answer

How to avoid getting the crypto miner virus

I'm about to install a new ubuntu server after having this virus https://askubuntu.com/questions/1115770/crond64-tsm-virus-in-ubuntu . When installing the new VPS I'm going to install clamav and follow these protection tips:…
Amos
  • 141
  • 7
-1
votes
2 answers

Malware infection possible on Cisco switches?

Are there any malware that target Cisco switches? I recently got one from a friend whose company threw them out after a ransomware attack, and are wondering if there is anything to be concerned about. Edit: model number is SG200-50.
Chris
  • 103
  • 6
-1
votes
2 answers

Update64.exe Using All CPU Resources

I have tried finding out what Update64.exe really does. I think it might be a virus but there's not much out there on the topic. Does anyone know how to fix this? It's using pretty much 80-100% of CPU. I have tried running the Microsoft Malicious…
-1
votes
0 answers

Nonexistent domain folder reappears with malware

If I'm sure the domain is not registered any more (since almost a year) I've deleted the FTP account to the folder of that "Addon Domain", deleted the folder, changed root cPanel's user password and assured the domain is not registered, but only…
-1
votes
1 answer

Server is trying to send out spam

My email server is attempting to send out a great deal of spam. I'm using Postfix & Dovecot. I'm trying to diagnose the problem and figure out how this is being sent. My guess right now is that it's using an insecure port 25 to send the email. Does…
Andrew Alexander
  • 161
  • 1
  • 10
-1
votes
1 answer

Backdoor:PHP/Shell.P keeps regenerating.Caught by Antivirus.

I have a windows server 2008 with PHP on it and a few Wordpress sites on it. I got a virus some time ago. I thought I had it deleted and everything was fine but after looking at my Quarantine section of my antivirus, I noticed that everyday it…
-1
votes
1 answer

Getting rid of Trojan on Debian Server

-------- EDIT --------- I do not agree that this is a duplicate of the linked question. I know that the correct way to deal with this is to wipe and reinstall the server. However, i am interested in the inner workings of this specific exploit and…
user871784
  • 99
  • 2
-1
votes
1 answer

My website redirects to malware link

I coded my own website and uploaded to a host. Some days ago I realized that in front page suddenly redirects to an unknown websites, until 3-4 redirects. The redirects ends up at:…
ishat
-1
votes
2 answers

Symantec - Flagging every local HTML file on my computer as a virus

I just ran Symantec Anti-Virus and it's flagging literally every since HTML, PHP, ASP/ASPX file on my computer as a virus. That's nearly 600 files on my laptop. Can this be? How can a text file (html/php/etc..) be a virus.
Tim
-1
votes
1 answer

Site blocked by google

I have my site that was hackered. I have removed all files and reloaded clean old files without the hacked code. Now when I use Google Chrome, I can't access my site because is shows as blocked. How can I solve this? If I go into webmastertools, it…
-1
votes
1 answer

Malicious program changing my DNSs

Some weeks ago I started having problems with my internet connection, it was extremely slow and suddently some websites (specifically gmail, facebook, youtube and twitter) started failing to connect, while the rest connect normally. Some days after,…
-1
votes
1 answer

Virus creates exe files with text content

Possible Duplicate: My server's been hacked EMERGENCY Something automatically creates exe files like "zytudou.exe" on my PC with text content: open 122.138.203.175 123 123 get tudou.exe C:\DOCUME~1\sttudou.exe bye Is it a virus? How to disable…
ihorko
  • 155
  • 1
  • 1
  • 9
-1
votes
1 answer

.htaccess malware detected - where to report?

just detected some .htaccess malware on one of my servers (shared hosting). The provider (1and1) doesn't seem to care (we take a look into this on monday). Is there any good place to report this attack? It seems to be a pretty new one, since Google…
bitrocker
  • 117
  • 1
  • 2