Search the Community
Showing results for tags 'malware'.
-
- 8 replies
-
- 1
-
-
- windows 10
- trojan
-
(and 2 more)
Tagged with:
-
Ayuda, creé un USB booteable de 16gb en NTFS para poder realizar una limpieza de virus en mi pc, pero al momento de bootear desde dicha memoria, me aparece este error: Welcome to GRUB Begin of (memdisk)/grub.cfg Check signature state is enforce Prefix is (hd0,msdos1)/boot/grub error: unknown filesystem. Invalid prefix. Try to search KRD files error: no such device: /boot/grub/k-x86 Root is hd0, msdos1 Config (hd0, msdos1)/boot/grub/grub.cfg Rebooting the system after 12 conocen la solución?
-
Стоит Kaspersky Internet Security. Скачал Format Factory с его официального сайта через Free Download Manager, так как Яндекс.Браузер почему-то обнаруживает вирус, и решил на всякий случай проверить на вирусы. ОВ хоте проверки Касперский сообщил, что якобы обнаружены легальные программы, которые могут быть использованы для нанесения вреда компьютеру. Из-за чего это может быть?
-
"Посчастливилось" столкнуться с новым майнером. Читал, знаю, понимаю, владею информацией, что данный вид зловредов блокируют доступ к сайтам антивирусов, не пускают в скрытые системные папки типа "AppData", "ProgramData" и т.д., - просто выкидывает на рабочий стол и закрывает эти папки, а также вылетает диспетчер задач. Скажу сразу, потратил сегодня целый день на этот зловред, но в итоге успешно получилось удалить его с системы без KVRT, докторов вебов и avBr... Но, всё-равно было непросто. Загрузился в безопасный режим с помощью CMD (с правами админа): bcdedit /set {default} safeboot network и после загрузки, с помощью диспетчера задач вырубал древа процессов, всех, напоминающих "подставные" процессы RealtekHD. Ниже прикреплю txt-файл с найденным в скрытой папке ProgramData bat-файлом, подробно описывающим все действия майнера-зловреда (использовал он powershell). После того, как вырубил дерева процессов, прямо тут же, молниеносно заходил в папку ProgramData и удалял exe-шники манера (предварительно просмотрев в диспетчере задач полный путь к файлу). Перезапуск майнера и всех исполняемых файлов по таймеру - примерно 1 минута, потом он снова запускается и блокирует доступ к папке, + восстанавливает все дочерние файлы. В итоге, после долгой пляски с бубном и попутным выяснением всех путей где он прячется и прячет "хвосты" для своего же восстановления, всё-таки удалил его. Попутно почистил реестр и файл hosts вручную. В hosts он блокирует доступ к сайтам антивирусного ПО, а в реестре блокирует доступ на запуск уже скачанных утилит KVRT, AVZ и так далее (просто по наименованию запрещает запуск). Если переименовать KVRT и прочие утилиты в любое другое название - они возможно запустятся (не пробовал). Вот такие дела. Видеокарта перестала греться и производительность стала в разы лучше. Прикрепляю файл с кодом манера. И да, чуть не забыл, чтобы вывести систему из режима безопасной загрузки: bcdedit /deletevalue {default} safeboot (у кого Win 10-11 - и кто не знает как - будет полезно). Кстати, после всех манипуляций, скачал KVRT, был найден неизвестный процесс в памяти. После перезагрузки запустил KVRT ещё раз - вредоносный процесс в памяти не обнаружился. И да, чтобы не править в реестре вручную ветки, чтобы запускались антивирусные ПО без переименования, рекомендую всё-таки скачать AVbr (https://www.safezone.cc/resources/av-block-remover-avbr.224/). P.S.: при изучении батника наткнулся на персональную ссылку создателя-майнера, думаю, специалисты заинтересуются. Благодарю за внимание.
-
- windows 10
- virus
-
(and 1 more)
Tagged with:
-
Muy buenas con todos, mi duda es la siguiente, hasta hace poco descargue un archivo winrar que al parecer tenia un virus, esto lo supe puesto que lo analize mediante el análisis contextual siempre hago este procedimiento para mis archivos descargados, el tema es que encontró un virus y lo elimino, pero tengo una duda y es la siguiente, yo no descomprimí el archivo infectado y tampoco no lo ejecute, pero si abrí el archivo winrar para solo ver que archivos contenía (me explico mejor, es decir hice doble clips en el archivo wirar y se abrió el visor o la aplicación pero solo para ver los archivos no lo descomprimí ni ejecute dichos archivos), es posible infectarme solo con observar a través del programa de winrar dichos archivo o necesariamente tengo que descomprimirlo o ejecutarlo. estaría muy agradecido con su respuesta.
-
Ich habe gerade eben ein SMS von der "Raiffeisen" Bank bekommen. Die SMS ist aber ohne dass sie von Google oder auf Kaspersky als fehlerhaft oder "nicht vertraunenswürdig" eingestuft wurde eingegangen! Ein kurzer Check auf https://opentip.kaspersky.com/https%3A%2F%2Fraff-kunde.online%2F/?tab=lookup Zeigt dass die Website auf "namesilo" registriert wurde. ABER weder die AUT Version noch andere europäische Filialen nutzen diese Domain!! Alle Bank Domanes von Raiffeisen haben kein "...Kunde . Online" als Weiterleitung sondern "de/privatkunden.html" davor. Und ganz wichtig die Website wurde bis 2024 schon bezahlt. Also werden sicher vermehrt solche SMS die nächsten Tage verschickt!! Die SMS ist mit einer Warnung versehen und ich konnte leider nicht ermitteln wer die SMS verschickt hat...
-
Muy buenas con todos, espero puedan solucionar mi duda, que es referente a la diferencia entre virus, troyanos, malwares y rasonwares, cual es la difrerencia entre estos tres tipos de amenazas. y lo otro es que yo trabajo o estoy protegido por kaspersky internet security, y quisiera saber, si este antivirus (Kaspersky internet security), me protege de estos tres tipos de amenazas, y en caso de que me infecte con alguna de estas amenazas el kaspérsky internet security ¿podrá limpiarlas y eliminarlas?. estaría muy agradecido con sus respuestas.
-
malware Wie kann die neue "Terminator Malware" Anti Viren Programme schließen??
Leander posted a topic in Für Privatanwender
Bin ich als Privatanwender davon betroffen? Sucht Kaspersky nach dem "Terminator . sys / zamuguard64 . sys / zam64 .sys" in C:\WINDOWS\system32\drivers\ nach der neuen Malware? Also als Frage an die Community -
Ist es möglcih den Unicode/Override links nach rechts gelesen zu blockieren?
Leander posted a topic in Für Privatanwender
Hallo Community, Ich habe ein Video gesehen wo es möglich ist mithilfe von der folgenden Unicodes eine Datei so zu verändern, dass sie nicht als .exe erscheind sondern als jede andere Datei. Beispiel ---exe.docx => sieht wie eine docx Datei aus aber dadurch, dass der Titel einen Unicode "left to right mark" verwendet ist es leider nicht gleich ersichtlich, dass es eine exe Datei und keine docx Datei ist. Man sieht es zwar wenn man im Explorer die Dateinamenerweiterung an hat. Kann auch mit jeder anderen Datei sein. Aber es wäre echt hilfreich wenn man diese Funktion austellen könnte damit fogende Befehle als Warnung angezeigt werden: U+200E LEFT-TO-RIGHT MARK U+200F RIGHT-TO-LEFT MARK U+202A LEFT-TO-RIGHT EMBEDDING U+202B RIGHT-TO-LEFT EMBEDDING U+202C POP DIRECTIONAL FORMATTING U+202D LEFT-TO-RIGHT OVERRIDE U+202E RIGHT-TO-LEFT OVERRIDE U+2066 LEFT-TO-RIGHT ISOLATE U+2067 RIGHT-TO-LEFT ISOLATE U+2068 FIRST STRONG ISOLATE U+2069 POP DIRECTIONAL ISOLATE Denn dann muss man nicht jede einzelne Datei überprüfen mit command prompt und ">dir" und man schauen muss ob TeXT "?x" vor dem Dateinamen steht. Vielen Dank für eure Hilfe in der Vergangenheit ? (Screenshot im Anhang zeigt die richtig angezeigte Datei und um welche es sich handelt, da man ja leicht das Icon wechseln kann)-
- windows 11
- malware
-
(and 1 more)
Tagged with:
-
Hello, I hope this message finds you well. I am writing to bring to your attention a false positive detection issue concerning my website. It has come to my attention that your antivirus engine is flagging my website as phishing, despite thoroughly cleaning it and ensuring its security. I want to emphasize that I have taken all necessary measures to remove any traces of malware or malicious code from my website. After detecting the security breach, I completely rebuilt the website from scratch, leaving behind no remnants of the previous compromised version. Additionally, I have performed extensive malware scans using reputable tools and have implemented robust security measures to prevent any future attacks. However, despite these efforts, my website continues to receive a high detection score on VirusTotal and other security scanners. This false positive detection is adversely affecting the reputation and functionality of my website, causing inconvenience to my users and damaging my online presence. I kindly request your immediate attention and assistance in investigating this matter further. I would appreciate it if you could review the security status of my website and correct the false positive detection. Providing me with information about the specific detection and any steps I can take to rectify the situation would be greatly appreciated. VirusTotal Report Description of Steps Taken Deep scan the local computer and hosting and removed all unwanted junk before rebuilding the website. Remove the complete website and Rebuilt from scratch. Now the website doesn't contain a single thing from the old website. Protected my website with future attacks with correct systems. So still our website doesn't have any malicious things, Also we are not providing any free software, our main goal is to help Marketers by providing paid software for those who want to make their work automated. So we have a wide range of software for every type of marketer. I understand that you receive numerous requests, but I am confident that this false positive detection can be resolved with your expertise. Your prompt attention to this matter is crucial, as it directly impacts the reputation and operation of my website. Thank you in advance for your cooperation and understanding. I look forward to your positive response and a swift resolution.
- 12 replies
-
- false positive
- virus
-
(and 1 more)
Tagged with:
-
Visual Studio 2019 ile C# çalışması yapıyorum,Çalışmamı bitirip debug yapıp uygulamayı çalıştırdığım zaman kaspersky kafayı yiyor uygulamada trojan var diyerek uygulamayı siliyor, dosya konumundaki herşeyi siliyor kısacası uygulamamamın çalışmasına izin vermiyor. Bunu düzeltmenin yolu nedir yardımcı olabilir misiniz?
- 4 replies
-
- windows 10
- virus
-
(and 3 more)
Tagged with:
-
Kaspersky is easily the best Anti-Virus for behavioral detection, and has a really good scanner, however that doesnt mean that the scanner isnt perfect. I think that Kaspersky should be a bit more aggresive, at least pre-execution, as I've seen it miss files associated with Malicious ones, or that create that specific file. Doing this would make Kaspersky alot stronger, and as its already pretty much a 100% detection rate, doing this would make it even closer to that.
-
Merhaba, Kullanmış olduğum Lisanslı Kaspersky Total Security, işletim sistemi Win 11 Pro 64-Bit Lisanslı. Laptopımı 2012 de satın aldım. Win 11 desteklemiyor ama ben yinede kurulum yaptım. Ancak 10 gündür tam tarama yaptığımda taranan nesne dosya sayısı 2 milyon çıkıyor ve tarama 1 saat 20 dakika sürüyor. Krd removal tool da ise 365.000 çıkıyor 40 dakika gibi bir sürede tarama yapıyor. Windows' un taramasında farklı sonuç çıkıyor. Acaba her hangi bir zararlı virüs, trojan vs mı bulaştı yoksa HDD mı bozuk veya Laptopım eski olduğu için Win 11 uyumsuz olması mı sorun? Ancak daha 1 veya 2 hafta önce her hangi bir sorun yoktu, her hangi bir riskli bir siteye girmedim, indirmedim veya tıklamadım. Yardımlarınızı bekliyorum
- 3 replies
-
- windows 11
- kvrt
-
(and 3 more)
Tagged with:
-
I'm interested in learning more about how Kaspersky Anti-Virus can be integrated with other security solutions to provide comprehensive protection for my devices. Are there any best practices for integrating Kaspersky Anti-Virus with other security products, such as a hardware firewall or a cloud-based security service? What are the benefits and potential challenges of integrating multiple security solutions? I'd appreciate any insights or advice on this topic. Regards! Alight.
-
virus kasbersky daha önce tıklanmış zararlı bağlantı ve indirilme reddedildi
berk bağ posted a topic in Kaspersky Anti-Virus
- 1 reply
-
- windows 10
- kaspersky free
-
(and 1 more)
Tagged with:
-
Diz que a verificação em segundo plano foi interrompida há 19 horas atras em 56%. Isso aconteceu depois de ter encontrado 6 positvos (trojan generico) na pasta temp do Windows. obg
- 2 replies
-
- windows 10
- trojan
-
(and 1 more)
Tagged with:
-
malware Can Kaspersky security suite of softwares scan images for malware?
Tashdeed posted a topic in Kaspersky Security Cloud
Here's an interesting article I have read recently regarding "malware hiding inside images". https://gizmodo.com/malware-images-virus-photos-pictures-how-block-antiviru-1849572516?fbclid=IwAR0bD94-LvGKCbznJ0Dh2wNH3xb_BFz0F-sJDAX92MKtqfY7UiKtUcQHHlo I personally did not know about this until recently. I didn't know that this was possible. But of course, this technique makes sense because images are clusters of data and there's data within the data. My question is simple, as the heading implies. Can Kaspersky security suite of software scan images for malware? I've kept website scans of all URLs enabled and I want every website that I visit to be scanned by my Kaspersky antivirus. I want to know, do Kaspersky's anti viruses also scan images along with the URLs on elsewhere on a website? If not, are Kaspersky working on this feature right now? If not, then my request would be to work on this. Thanks.- 1 reply
-
- kaspersky free
- kaspersky basic
- (and 16 more)
-
Does Kaspersky look inside the Docker VM? See Hiding malware in Docker Desktop's virtual machine - Atlassian Community. That article says enough to know there is reason to be concerned but not enough for me to know much more. The important thing is that if Kaspersky does not look inside the Docker VM then it is entirely useless protection from that vulnerability.
-
Hello I just format my pc and downloading some programs. I'm using getintopc for downloading cracked programs like adobe photoshop and I wanted to ask is it safe to download from this website? and is there anyone got hacked after using this website?
-
As title says, chrome trying to access my webcam few times per day. Anyone else with this problem? Mostly when i open gmail. Pls share solution .
-
I have 2 identical Win 10 PCs. One suddenly has a lot of popups after kaspersky warned about a site. Nothing was clicked on and just went back. I'm told this is when the popups started, I checked the extensions and Kaspersky is enabled. However I noticed the Icon on the top right of the browser isn't there like it is on my other PC. This is where I can see if the add blocker is checked or not. Any idea of whats going on?
-
Avast is detecting a virus-threat in C:\ProgramData\Kaspersky Lab\AVP21.3\Temp
Stormmaker23410 posted a topic in Kaspersky Security Cloud
My Avast is going of constantly, first it said it was in tempio folder, now its just Temp. It started like from nowhere. I tried deleting them, but they came back.- 2 replies
-
- windows 10
- kaspersky free
-
(and 1 more)
Tagged with:
-
Поймал троян, антивирус его удалил, но продолжил отсылать мне подобные уведомления с запросами от rundll32 и regsvr32 с какими-то случайными IP, подозреваю, что заразили систему, можно это как-то решить без сноса винды?
- 1 reply
-
- windows 10
- kaspersky free
-
(and 2 more)
Tagged with:
-
virus Files encrypted by a modification of Trojan-Ransom.Win32.Stop
Jorge Ivan posted a topic in Kaspersky Endpoint Security Cloud
- 1 reply
-
- windows 10
- malware
-
(and 2 more)
Tagged with:
-
I scanned a file that appeard suspicious and Kaspesky couldnt disinfect it.
Veerain posted a topic in Kaspersky Total Security
Hello I am using kts on my windows 10 home and kaspersky Kts version 21.3.10.391 (i) Just recently I downloaded a file from mega (was a setup file for some programm that I needed (had the name setup.exe)) and I have a habbit of scanning the exe file which I download so as always I scanned them with Kaspersky before opening them(running the exe files)) So i ran the scan and voila! it was indeed malicious. it said after the scan: here is the scan report Now all of these files I didnt run them but scanned them. So I wanted to ask( I deleted both the files btw) Even after deletion do they pose a threat? if i did not run the setup? btw i deleted the setup.exe file which came out from the REPACK PASS (812736).rar- 5 replies
-
- windows 10
- kts
-
(and 2 more)
Tagged with: