Computer Help

 

return to knowledge center


    There is a broad range of ways that malicious software (malware) can infect your computer. And once your computer has become infected, the results can range from minor annoyance, to data loss, to a completely unusable machine. Most malware, as a minimum, will try to use your computer to infect other computers, as well as open doorways to allow other infectious code onto your machine. Once a few bad seeds have been planted in your computer, the speed with which other problems can crop is staggering. This is why prevention and basic education about the threats is one of the best ways to combat the problem.

    If you read the headlines in the daily paper, or watch the nightly news, you have probably, at least, heard mention of the following terms: virus, trojan, worm, backdoor, spyware, adware, and virus hoax (to name a few). But what does it all mean?

 

Malware – Malicious software. The broadest heading for any bad software. (Mal is the Latin root for “bad”)

 Virus – A computer virus is piece of code that infects files or programs. When an infected file is exposed to an uninfected file or an uninfected program, it can spread the infection – just like a virus. In addition to this process of spreading and infecting, a virus will usually carry some “payload”. The payload is usually some additional action the virus takes once it has infected a computer. The payload can do almost anything imaginable, ranging from deleting all your files to simply setting your clock behind one hour.

 Trojan Horse – The Trojan Horse is so named because of it’s similarity to the Trojan Horse of ancient history – believed to be a gift from the Gods and let into to the city of Troy, only to have an army of Greeks to emerge from it’s belly. A Trojan is a program that you put on your computer and run, believing it to be something it is not. You may download and run what you think is a weather or music program, but in fact it is stealing your passwords and sending them to bad people. It may even appear to be a perfectly legitimate program and work the way you thought it would. A Trojan differs from a virus in that it does not replicate itself, but relies on the user to install it.

 Worm – Worms are what have been receiving the greatest amount of media attention recently, due to the absolute speed with which they move and the total prevalence of them on the Internet. An unpatched Windows XP  machine plugged into the internet will be infected with one or several worms within minutes or seconds. A worm acts much like a virus in that it A) self-replicates, and B) delivers some payload. However, while a virus is typically imbedded in a file, and can only be transmitted by transmitting that file (email for example), a worm is less tied down and can jump in and out of files and from computer to computer at will. A worm doesn’t need the user to do anything at all; all it needs is an internet connection and unprotect computers.

 Virus Hoax – A virus hoax is little more than a glorified chain letter. You may receive an email claiming “There is some awful virus you need to warn all your friends about, so send this letter on to them.” A virus hoax can be just as pervasive as a virus; it replicates itself by tricking people into sending copies to all their friends. In a worst case, a virus hoax can deliver a payload as well. It may instruct the user to delete some viral files, like system32.dll. This is, of course, an important operating system file, but the uninformed user may be fooled into deleting it, thereby wreaking havoc on their own system. Virus hoaxes rely on a user’s willingness to blindly follow instructions. While this may sound silly, history has shown us that people are all too willing to do so. The simplest solution to this particular type of malware is common sense. Don’t forward these emails. Don’t follow unsolicited instructions.

 Backdoor – A backdoor is a payload that can be delivered by a trojan or a worm. It is a secret entrance (as the name suggests) into your computer that can be exploited by bad person.

 Spyware – Spyware is essentially a mild form a trojan. Typically you will install some program, and without your knowledge it will monitor your internet activity, what kinds of things you purchase online, etc and report back to the bad guys to give them what they consider to be marketing data. If the spyware did worse things, like steal your passwords, you would call it a trojan.

The terms 'adware' and 'spyware' are often used interchangeably, and the distinction between the two is often quite unclear.

 Adware – Adware is similar to spyware in that, in theory, it monitors your internet activity and then presents you with (usually popup) advertisements for things that it thinks your inclined to like. In practice, these programs are not nearly so graceful- in large numbers, the advertisements they spawn and the system resources they require to run can render your computer completely unusable.

return to knowledge center


© 2004 Computer Help