Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

"Malware" is a portmanteau of "malicious" and "software"

Common forms of malware include:

  • Botnet clients, which grant the malware author some degree of control over the compromised operating system and are generally employed in sending spam e-mail and may be rented out to perform DDoS attacks.
  • Data exfiltrators, which collect and transmit data about the computer they reside on back to the creator. These are commonly used to target login and account details for financial, social networking, and gaming websites.
  • Rogue Utility Applications, which attempt to use scare tactics in order to entice the computer's user to purchase the "full version" of the Rogue Utility.
  • Adware, which causes advertisements to appear on the user's desktop, in webpages, or elsewhere.
  • Rootkits, which attempt to conceal the presence of both the root kit and (usually) an accompanying piece of malware from another category from standard system tools and diagnostic utilities.
333 questions
1
vote
6 answers

Do my macs need anti-virus/malware products?

This caused flame war in my Mac users group, but the recent advisory that Apple released and then pulled suggesting using anti-virus products. My take is that it's worth being safe rather than sorry, what's the general feeling on serverfault? And if…
alimack
  • 943
  • 2
  • 11
  • 22
1
vote
1 answer

Microsoft Security Essentials says phantomjs for Windows has Varpes.M!plock virus

I can scan the zip file phantomjs-2.1.1-windows.zip, and it does not remove anything. But once I unzip the exe, Security Essentials remove the phantomjs.exe. The zip has the correct MD5 checksum. Any solutions?
JohnWrensby
  • 123
  • 3
1
vote
1 answer

Getting heavy traffic from random IP addresses

Digital ocean closed my droplet dude to have traffic on droplet. I made a new droplet(instance) and I am facing the same issue again. My nginx access.log is full of random ip address trying to make POST call. I have pasted some of it at the…
1
vote
1 answer

Troubleshooting connectivity when curl returns 'empty reply' from a server on my computer only

For whatever reason, my computer (Mac OS X 10.11.1) cannot fetch a webpage from a website using curl when it works fine on other computers. Also ping works but curl doesn't: $ ping www.latex-tutorial.com PING latex-tutorial.com (162.252.172.25): 56…
sia831
  • 13
  • 1
  • 3
1
vote
0 answers

LMD/Maldetect: Missing target-file operand after

After running mallet 1.5 in screen-mode (# maldet -a /var/www) I'm getting this return: maldet(6070): {scan} 618017/618044 files scanned: hits 0 cleaned/usr/bin/wc: /usr/local/maldetect/tmp/.sess.6070: Datei oder Verzeichnis nicht…
MyFault
  • 913
  • 3
  • 15
  • 36
1
vote
1 answer

Malware scanning in the cloud (Azure)

Has anyone had success implementing a mechanism that can scan uploaded files for malware when using Azure? In this instance, I would be using their Sites and storage options, rather than controlling an entire OS. In some cases, I know companies…
appsecguy
  • 209
  • 2
  • 5
1
vote
5 answers

Is my server being hacked?

Possible Duplicate: My server's been hacked EMERGENCY I got this weird page, which I am very sure was not created by me: Where the…
canonball09
1
vote
3 answers

Is there a quick & easy solution to protect server 2012 against malware?

For a Windows Server 2012 Standard GUI version to support a small IDE Getting malware protection on my 1st server has become a much bigger problem than I imagined it would. My research covered a lot of pages, but the following 2 links stand…
Alan
  • 1,003
  • 2
  • 20
  • 36
1
vote
3 answers

clamscan using maldet Error: Servname not supported for ai_socktype

So i have installed Linux Malware Detect (maldet) to scan a server and everything went fine with installation but when i run it i get an error. Bunch of errors and than the scan just closes it. Here is a command i have run on maldet to scan for a…
lonerunner
  • 124
  • 1
  • 4
  • 16
1
vote
1 answer

malicious files

can virus's/spyware/malware/trojans/worms get on your remote desktop/terminal services servers from a local machine?
pasqual
1
vote
1 answer

Receiving empty mails from three different Windows PC's since 12 January, 2015

Problem Unexpected empty emails are sent by an unknown source since 12 January, 2015. Attempts to solve the issue they are all from company where I do network/sys support they are all from Windows 7 machines all machines have outlook…
mist
  • 21
  • 7
1
vote
2 answers

Best practices for isolating malware/honeypot samples

I am pursuing malware research and am wondering what are the best practices for building safe VM's to contain the code while disassembling it. So far: Each instance for examining the code is housed in a seperate VM with host-only network support…
Scott Davies
  • 423
  • 1
  • 5
  • 9
1
vote
2 answers

Why is this server generating outbound IRC connections?

I noticed last night whilst checking our active sessions list on our firewall for something else, that a server was generating outbound IRC connections. Last night there was around 60 connections but this morning it's much less. [root@prod12 ~]#…
1
vote
4 answers

Blocking Invalid HTTP Requests to PHP Application

For the first time in a number of years, I'm semi-responsible for helping out with the server administration of a PHP web application (served out using Apache). We're seeing a number of requests for invalid URLs, which I assume are malware/exploit…
Alana Storm
  • 458
  • 5
  • 16
1
vote
2 answers

Best way to trace outgoing requests from a server

We have an Ubuntu 14.04.1 LTS server with nginx 1.4.6 that hosts a few dozen websites and received an abuse complaint from another server of hundreds of requests like this: "POST /wp-login.php HTTP/1.0" coming from our server. How can I go about…
Craig
  • 289
  • 2
  • 7