Search the Community

Link: The Malware Museum : Free Software : Download & Streaming : Internet Archive

I wonder if anybody out there can help? We have DNSUnlocker, it’s a savage piece of Malware, which, appears to be totally invisible. By this I mean it’s not installed on the PC (Or is it ?) and currently its effecting Google Chrome underlining various links, and displaying popups (Some are very inappropriate) A sample Screenshot is attached, showing the Edugeek homepage, with random words underlined. Anyone have any suggestions on how to remove it? If you “Google” DNSUnlocker, there are various guides that outline removing applications, registry entries, etc, even modifying the DNS settings, however none of this has been found/ tampered with! We are at a loss! Even using Google’s DNS servers the problem persists. Any help would be greatly appreciated. Thanks.

This is similar to Autoruns from SysInternals, but for Macs. Website / Download (Direct Link) http://i.cubeupload.com/QO2sg0.png http://i.cubeupload.com/EaEYuA.png http://i.cubeupload.com/iQ4yFm.png

Time for another update. Java SE 7 Update 21 Download (Windows: 32-bit, 64-bit / OS X: 64-bit) / Release Notes / Security Advisory Note. According to the release notes, this update will expire on 18th July 2013. http://i.imgur.com/ed63Nxc.jpg

Hello. I have a bit of an issue that needs pinpointing and I want to know if there is any free software that lets me monitor traffic of individual machines on our network? Thanks in advance.

As discussed at EGconf'10 - here's a few screenies of my sequinned assistant.. I mean respected colleague Nile visiting a fakeAv site. Of course he was running firefox on linux at the time, so had little chance of getting infected seriously - although Wine was perfectly willing to run it! Rather than bore you with the stuff I put together for our internal team, I'll give you guys the raw material. I suggest you use a screenshot of this, combined with your REAL av whatever you use - and let users know the difference. If you close the site before you get to the final phase, you are generally safe. If you want to harmlessly trigger your real desktop AV in order to get a screengrab, you can use the EICAR test file: http://www.eicar.org/anti_virus_test_file.htm this is a small, harmless file that *should* trigger a positive in any AV engine. If yours doesn't complain to your vendor. I have certainly seen it trigger Clam, Kaspersky, Bitdefender and Sunbelt. Few extra bits: How did we find this site? Well we searched for "Rima Fakih pole dancing" - some ex-Miss USA with an.. embarrassing.. old home movie. This is how these guys operate - they pimp on popular search terms. Today you'll find some on "red dead treasure map" though the cleanup is well under way there. The Virustotal PDF is a printout of an analysis I sent to virustotal when we were looking at aforementioned pole-dancer.. it was certainly a couple of days into the outbreak, and as you can see, the nature of the malware has rendered many of the "big names" ineffective. In fairness, running that same exe now, a couple of weeks later, gets 38/41 coverage, with Fortinet being the only relatively major casualty. fakeav.zip

I was asked to have a look at a laptop by somebody as a favour. This laptop is used by the guys kid and I'm pretty sure he's picked up a load of malware or a virus. The laptop is running XP Pro and it boots up OK and presents you with the Welcome screen. Selecting the user then pops up the loading user settings message and then immediately displays the saving settings and logging off messages I've run ClamAV across it (from Knoppix) and deleted a load of adware. I've also used an offline registry editor to check the Winlogon keys for dodgy entries. It still doesn't work! It's really go t me stumped now this but curiosity has got the better of me and I don't just want to wipe it and start again.

I have noticed this morning that I am no longer seeing McAfee ClickProtect links in my e-mails. I know that McAfee are migrating customers away from this product as it is end of life. I am hoping Link2ICT are going to implement an alternative solution as with the rise in Ransomware this extra security is much needed.

Source: MalwareBytes Blog (via The Verge)

A useful guide from Microsoft's Mark Russinovich. Website: blogs.technet.com/b/markrussinovich/archive/2013/01/07/3543763.aspx

I hope no one here browses YouTube while logged on as a domain administrator? Source: Trend Micro

Hi all, I'm looking at web filtering options (SW, Forefront, Bloxx, SmartCache2 plus a few others...) for emPSN contracts Nov 2012+ and would like to know if anti-malware scanning on web filtering is something that anyone uses and what are your reasons for/not having it? (be it cost, necessary or otherwise...) Just out of interest; does anyone know whether there is anti-malware scanning on the current EMBC Netsweeper filter? (I've found no references to the web threat management module in all of the docs from embc in the technical area. Waiting for Synetrix(Capita ITS) to get back to me.) Cheers Rob