An anti-virus program registering every executable file on the computer as infected indicates the computer may be under attack by a virus. According to PC Magazine, a virus attaches copies of itself ...

According to Lordian Mosuela, a researcher with Israel's Commtouch, the Right-to-left-override (RLO) unicode control character allows hackers to hide executable code as other types of file names. The ...

This is to inform you all, please do not open a video received by any medium, called the “Dance of the Hillary” and executable file “tasksche.exe. It’s a very dangerous virus. A passionate observer of ...

The file, bfsvc.exe is the Windows operating system file for the Boot File Servicing Utility. It’s vital to your computer’s functioning, but only if it’s the legitimate bfsvc.exe. I added the above ...

NotPetya superficially resembles the Petya ransomware in several ways, but there are a number of important ways in which it's different, and much more dangerous. Petya and NotPetya are two related ...

Update 10/15/16: I have updated the article below to address that this ransomware is not continuously monitoring for files. When the ransomware runs it will target the %Desktop% first and then encrypt ...

Microsoft has released Sysmon 14 with a new 'FileBlockExecutable' option that lets you block the creation of malicious executables, such as EXE, DLL, and SYS files, for better protection against ...

I often get emails from people asking if it’s safe to download executable programs from peer-to-peer filesharing networks. I always answer with an emphatic “NO!,” and the warning that pirated software ...

Taskhostw.exe is a Windows operating system file. The main function of taskhostw.exe is to start the Windows Services based on DLLs whenever the computer boots up. It is a host for processes that are ...