Questions relating to malicious software

learn more… | top users | synonyms (1)

0
votes
1answer
39 views

Malware present in my Ubuntu, says some tabs in Chrome

I have been getting some new tabs like the two titled "WARNING - SECURITY..." with voiceover saying something to the effect: "You probably have installed some software that puts your computer's ...
1
vote
0answers
415 views

How to get rid of the DNS Unlocker adware?

From this morning I'm witnessing unfamiliar ads apearing in different pages while using Firefox which they say "Ads by DNSUnlocker". I searched for it and it seems this is a known adware infecting ...
1
vote
1answer
43 views

Can ClamAV detect Linux malware as well as Windows malware?

I have seen this asked here and there, but I just can't find an answer on it, does ClamAV scan for Linux viruses as well as Windows ones? Or does it at least have heuristics capabilities which would ...
0
votes
0answers
125 views

How to remove redirection to tradeadexchange? [duplicate]

Google chrome on Ubuntu While browsing, randomly opens a new tab to www.tradeadexchange.com and from there to an ad. How do I delete this malware or adware or whatever it is? BTW, tradeadexchange ...
0
votes
0answers
31 views

logrotate broken after security breech

I downloaded a PDF which evidently had Linux malware, which executed when I ran the PDF through firefox, or atril, Im not sure which. I figured it out shortly after running clamav, and I believe ...
0
votes
0answers
16 views

Malware redirects Opera pages, Ubuntu 14.04

I just started getting occasional redirects running Opera 31 under Ubuntu 14.04LTS. I uninstalled Opera then pulled over a backup of my profile, but they're still popping up. They seem to occur ...
3
votes
3answers
71 views

Windows Virus in Ubuntu

I used my USB to transfer files from our library computer in school to my netbook (which is running on Ubuntu). Next, I used my father's USB to transfer another file from my netbook to his Ubuntu ...
1
vote
2answers
42 views

Clamav not accepting parameters

I'm trying to run clamAV, and I was getting warnings about maxfile size reached.So now, I am trying to increase the limits on the max filesize, and max scan size, but I get errors, about not being ...
-1
votes
0answers
25 views

Phone problems wifi [closed]

I changed my phone recently and I tried watching a film on my new phone my phone went mental by vibrating and a warning sign came up saying iv a virus from visiting adult sites I done a reset on my ...
0
votes
1answer
35 views

Need help please, ClamAV shows 3 infected files /initrd.img: Symbolic link, /initrd.img.old: Symbolic link, /vmlinuz: Symbolic link

Could anyone please help me with the 3 infected files that clamav shows me. I ran clamscan -r / which showed infected files - 3 Next I ran clamscan -v / which showed these files /initrd.img: Symbolic ...
0
votes
0answers
158 views

virus in ubuntu 14.04 adware malware spyware…?

I am using Ubuntu 64 14.04. I have used Ubuntu for many many years, and today I got malware or spyware, although I don't really know what it is. I use chrome Version 44.0.2403.89 (64-bit) the latest ...
1
vote
2answers
95 views

Strange extremely nonspecific error message, malware?

I use UbuntuGNOME 15.04 with gnome 3.16, and I got the following error message in a small popup. "Warning! System error detected. Would you like to report it?" While everything was fine and ...
0
votes
1answer
60 views

Malware opens up some youtube video in ubuntu

I am having a very strange problem. While working on ubuntu, suddenly out of nowhere a new chrome tab with a random youtube video opens up and starts playing. Only relevant issue found on internet is ...
1
vote
1answer
24 views

Is there a risk to run viral embedded macros on Ubuntu/LibreOffice?

Our small organization receives a lot of fake emails with .doc attachments containing VBA viral macros. Is there a risk to run these macros on LibreOffice / Ubuntu?
1
vote
1answer
88 views

Clamav scan finds PUA.HTML.Exploit.CVE_2014_0322

I recently did a scan using Clamav, and these were two of the results: /usr/share/doc/properties-cpp/html/jquery.js: PUA.HTML.Exploit.CVE_2014_0322 FOUND /usr/share/doc/process-cpp/html/jquery.js: ...
1
vote
1answer
48 views

Danger of running infected .pif file with Mono

I (stupidly) ran a .pif file attached in a spam email that I can assume was containing some malware. Basically I double clicked on it and it was opened with Mono. I didn't see anything running and ...
0
votes
0answers
19 views

some applications create unknown files with exe and pif extension in external disk and usb stick in wine

I am on Ubuntu 14.04.2 platform. I installed some Windows applications in Wine. I noticed that when I run an application in Wine it creates numerous suspicious random file names with pif and exe ...
2
votes
1answer
75 views

Can malware enter Ubuntu?

I have a desktop computer with Window 7 system and Ubuntu (installed by my boyfriend). Last week when I shopped online on Win7, I accidentally caught Eye Perform ads in Firefox. I Google and found ...
2
votes
1answer
206 views

How do I remove the brontok virus that has infected my Ubuntu via Wine?

My laptop runs on Ubuntu and was recently infected with the brontok virus it managed to infect my Ubuntu - through my flash drive - because I have Wine installed. I had used the USB in an infected ...
1
vote
1answer
184 views

I have a exploit virus detected by ClamTK that I Can't remove

I cannot delete or quarantine. /usr/share/mime/mime.cache PUA.Win.Exploit.CVE_2012_01
0
votes
0answers
17 views

During startup, why does my computer reboot before or shortly after the Desktop appears?

I think it may be a virus in the system area because I scanned the 'Home' folder with both ClamTk and Comodo with updated AV databases and found no culprit. But when I choose 'Advanced Options' from ...
0
votes
1answer
47 views

Viruses detected in wubi.exe supplied with Ubuntu [closed]

I downloaded an ISO ubuntu-12.04.5-desktop-i386.iso and sent the wubi.exe for total virus and it was there that detected below: ByteHero Virus.Win32.Part.a 20,150,602 Jiangmin Trojan / Generic.bvycy ...
1
vote
1answer
308 views

can windows virus affect Linux machine through wine? [duplicate]

When we use wine on Linux PC windows Virus can affect folders of wine? I think may be not; But I still Confuse about that. What is accurate answer? Wine is emulator of windows then some question ...
0
votes
0answers
25 views

Folders changed icons and became inaccessible

I recently noticed that one of my folders changed the icon(from 'folder' icon to 'mp3' icon) and when I tried to get in, delete, rename the folder, it wouldn't let me. Today another folder got the ...
1
vote
3answers
355 views

adcash removal assistance needed

help me to get rid of adcash pop-ups, please. I thought that ubuntu is a more or less virus-free system ( please,in case when u answering, try to be as thorough as it's possible, because I installed ...
1
vote
1answer
23 views

k9copy concerns

I downloaded k9copy from tomtomtom and test installed it. After installing the program wouldn't run from unity but did run from terminal. It opened a window and I did a test rip on a movie in my ...
4
votes
3answers
9k views

remove pop up ad from ads.matte.com malware from ubuntu!

A malware pops up http://ad.adsmatte.com/<random string> and annoys me every time i click on a link. It has also denied me access to youtube. The youtube page is completly disoriented and doesnt ...
0
votes
1answer
134 views

ShopGlider Deals has taken over my Chrome Browser in Ubuntu 14.04 HOW DO I REMOVE IT?

PLEASE HELP! Does anyone know how to completely remove the ShopGlider Ads/Deals malware from Chrome? I'm running Chrome Version 42.0.2311.135 (64-bit) And Ubuntu MATE 14.04. There are no ...
1
vote
2answers
70 views

What is this and how can this happen? Is this a security issue or can it be a virus?

From the last 3-4 days, my laptop has started becoming much laggy when I'm working on Android Studio or if it is just running in the background. So, today again I was working in Android Studio. My ...
2
votes
1answer
108 views

Mumblehard Malware on my Server?

this morning, I watched a monthly webinar about IT-Security. One of the actual topics was the malware "mumblehard". This malware makes your server to a part of a botnet and sends spam via email. The ...
1
vote
1answer
805 views

.android Folder and adbkey Files

Today I discovered a folder in my home directory with the name ".android". Inside the folder are just two files, "adbkey" and "adbkey.pub". I have searched around and have found out that adbkey.pub ...
0
votes
1answer
73 views

Completely…I mean COMPLETELY wiping my hardrive

I am new to linux, a total noob to be exact. I am using ubuntu 14.04.2 I am having a problem with people at school who have somehow hacked my computer. I have formatted my hard drive 3 or 4 times ...
3
votes
2answers
2k views

PUA.Win.Exploit.CVE_2012_0110 FOUND

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
0
votes
0answers
113 views

Spyware in Ubuntu? (I've got some issues with Chrome lately)

I've got Ubuntu 14.04 LTS. All the updates are up to date. I've experienced something like a spyware lately, which I thought it couldn't (or shouldn't) happen with Linux. It happens when I'm using ...
0
votes
1answer
78 views

Can an unmounted USB be infected my malware?

Yesterday, I went on a dark creepy site whose js freezed my system/firefox (Ubuntu 14.04 up to date, Firefox 37.0.1 up to date). Now I tried, from the same system, to find any malware with: sudo ...
0
votes
0answers
488 views

How to tell what a PUA.JS.Xored actually is

Almost every time that I scan my machine with ClamAV I get some results reporting that there is this PUA in my browser's cache: PUA.JS.Xored And I understand that this is encrypted JavaScript of ...
0
votes
2answers
423 views

Malware from rdsrv.com on Google Chrome

I am continuously getting popups from rdsrv.com on Google Chrome. I am on Ubuntu 14.04. I tried resetting browser, and uninstalling every extension, but still have the popups.
3
votes
1answer
541 views

PUA.Phishing.Bank Found

I scanned my machine (with the latest version of ClamAV) after looking at some images which were loaded from external sites and those sites seem to be dodgy hacking sites, and these were some of the ...
3
votes
1answer
69 views

Trojaned version of file “egrep” detected by OSSEC HIDS

I have installed the latest stable version of OSSEC (2.8.1), and I have also enabled email notifications and today I got this alert through email: OSSEC HIDS Notification. 2015 Apr 03 17:40:26 ...
2
votes
4answers
2k views

remove youradexchange malware from chrome

Does anyone have experience removing the 'youradexchange.com' browser hijack on ubuntu? I find a lot of information regarding this for Windows, but there is nothing for linux. When I am using Chrome, ...
1
vote
1answer
415 views

What should I do next with infected files and errors?

I scanned my computer for viruses by using clamav: sudo clamscan -r --bell -i /. I received the following result: LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning ...
2
votes
5answers
489 views

weird malware has infected firefox and chromium

This is so much annoying. I've never experienced it since I'm using linux. This weird adware is pupping up every time I open a .com website and shows ad or redirects the page. In chromium, I'm not ...
0
votes
1answer
156 views

Ad By: MediaPlayer

Help! I'm getting popups and ads all over the place and they all say "Ad By: MediaPlayer". I'm fairly new to ubuntu 14.04 and thought that viruses were virtually impossible to get with Linux but ...
0
votes
2answers
335 views

Chromium infected with CloudScout on Ubuntu 14.04

Somehow Chromium Browser on my Ubuntu 14.04 (I suspect Chrome synching from a Windows 10 machine to my Ubuntu Chrome) has been infected with CloudScout. I have uninstalled Chromium Browser included ...
-1
votes
1answer
24 views

software-center diplays info on apps that i have not installed

While installing a deb file using software-centre the following info is printed on the terminal 2015-03-07 14:05:22,035 - softwarecenter.db.update - INFO - skipping region restricted app: 'Just Play ...
1
vote
1answer
44 views

repeatedly asked for admin password

With a brand-new Ubuntu 14.04 installation I streamed the third period of a hockey game last night. It was literally the first time I used this new computer. It connected to wifi no problem, and ...
2
votes
2answers
997 views

Firefox default language keeps changing automatically to arabic

I am getting an ongoing issue with Firefox 36.0 under Ubuntu 15.04. Whenever I open Firefox it automatically sets the default language to Arabic, even though having never configured it to use Arabic: ...
0
votes
1answer
194 views

Creating windows 8 bootable usb stick under linux with Winusb (saucy) changes my iso file hashes - is it normal, bug or harmfull behavior?

There is a lot of questions about creation of windows 8 usb stick in linux environment. And a lot of answers pointing to Winusb(saucy) as an app that can do it. I installed it too, using this method: ...
4
votes
1answer
185 views

LibreOffice Writer edited document is recognized as virus or spyware

I got MS word document, person asked me to edit it, to add table of contents, to add page numbers, because she doesn't know how to do in MS Office. So I did with LibreOffice writer. But when I saved ...
4
votes
3answers
930 views

ClamAV detects certain files on the PlayOnLinux directory as malware, should I be concerned?

ClamAv found 50 viruses on my computer, mostly associated with PlayOnLinux. Is this normal? Is it a significant risk? Should I be concerned? How do I learn more about these viruses so I can judge ...