Endpoint Protection

 View Only

What are malware, viruses, Spyware, and cookies, and what differentiates them ? 

Jun 25, 2009 02:03 PM

 

What are malware, viruses, Spyware, and cookies, and what differentiates them ?

"Malware" is short for malicious software and used as a single term to refer to virus, spy ware, worm etc. Malware is designed to cause damage to a stand alone computer or a networked pc. So wherever a malware term is used it means a program which is designed to damage your computer it may be a virus, worm or Trojan.


Worms:-
Worms are malicious programs that make copies of themselves again and again on the local drive, network shares, etc. The only purpose of the worm is to reproduce itself again and again. It doesn’t harm any data/file on the computer. Unlike a virus, it does not need to attach itself to an existing program. Worms spread by exploiting vulnerabilities in operating systems

Examples of worm are: - W32.SillyFDC.BBY
Packed.Generic.236
W32.Troresba

Due to its replication nature it takes a lot of space in the hard drive and consumes more cpu uses which in turn makes the pc too slow also consumes more network bandwidth.


Virus:-
Virus is a program written to enter to your computer and damage/alter your files/data. A virus might corrupt or delete data on your computer. Viruses can also replicate themselves. A computer Virus is more dangerous than a computer worm as it makes changes or deletes your files while worms only replicates itself with out making changes to your files/data.

Examples of virus are: - W32.Sfc!mod
ABAP.Rivpas.A
Accept.3773

Viruses can enter to your computer as an attachment of images, greeting, or audio / video files. Viruses also enters through downloads on the Internet. They can be hidden in a free/trial softwares or other files that you download.

So before you download anything from internet be sure about it first. Almost all viruses are attached to an executable file, which means the virus may exist on your computer but it actually cannot infect your computer unless you run or open the malicious program. It is important to note that a virus cannot be spread without a human action, such as running an infected program to keep it going.

Virus is of different types which are as follows.

1) File viruses
2) Macro viruses
3) Master boot record viruses
4) Boot sector viruses
5) Multipartite viruses
6) Polymorphic viruses
7) Stealth viruses


File Virus:-This type of virus normally infects program files such as .exe, .com, .bat. Once this virus stays in memory it tries to infect all programs that load on to memory.

Macro Virus: - These type of virus infects word, excel, PowerPoint, access and other data files. Once infected repairing of these files is very much difficult.

Master boot record files: - MBR viruses are memory-resident viruses and copy itself to the first sector of a storage device which is used for partition tables or OS loading programs .A MBR virus will infect this particular area of Storage device instead of normal files. The easiest way to remove a MBR virus is to clean the MBR area,

Boot sector virus: - Boot sector virus infects the boot sector of a HDD or FDD. These are also memory resident in nature. As soon as the computer starts it gets infected from the boot sector.
Cleaning this type of virus is very difficult.

Multipartite virus: - A hybrid of Boot and Program/file viruses. They infect program files and when the infected program is executed, these viruses infect the boot record. When you boot the computer next time the virus from the boot record loads in memory and then start infecting other program files on disk

Polymorphic viruses: - A virus that can encrypt its code in different ways so that it appears differently in each infection. These viruses are more difficult to detect.

Stealth viruses: - These types of viruses use different kind of techniques to avoid detection. They either redirect the disk head to read another sector instead of the one in which they reside or they may alter the reading of the infected file’s size shown in the directory listing. For example, the Whale virus adds 9216 bytes to an infected file; then the virus subtracts the same number of bytes (9216) from the size given in the directory.

Trojans: - A Trojan horse is not a virus. It is a destructive program that looks as a genuine application. Unlike viruses, Trojan horses do not replicate themselves but they can be just as destructive. Trojans also open a backdoor entry to your computer which gives malicious users/programs access to your system, allowing confidential and personal information to be theft.

Example: - JS.Debeski.Trojan

Trojan horses are broken down in classification based on how they infect the systems and the damage caused by them. The seven main types of Trojan horses are:
• Remote Access Trojans
• Data Sending Trojans
• Destructive Trojans
• Proxy Trojans
• FTP Trojans
• security software disabler Trojans
• denial-of-service attack Trojans

Adware: - Generically adware is a software application in which advertising banners are displayed while any program is running. Adware can automatically get downloaded to your system while browsing any website and can be viewed through pop-up windows or through a bar that appears on a computer screen automatically. Adwares are used by companies for marketing purpose.

Spywares: - Spyware is a type of program that is installed with or without your permission on your personal computers to collect information about users, their computer or browsing habits tracks each and everything that you do without your knowledge and send it to remote user. It also can download other malicious programs from internet and install it on the computer.Spyware works like adware but is usually a separate program that is installed unknowingly when you install another freeware type program or application.

Spam: - Spamming is a method of flooding the Internet with copies of the same message. Most spams are commercial advertisements which are sent as an unwanted email to users. Spams are also known as Electronic junk mails or junk newsgroup postings. These spam mails are very annoying as it keeps coming every day and keeps your mailbox full.

Tracking cookies: - A cookie is a plain text file that is stored on your computer in a cookies folder and it stores data about your browsing session. Cookies are used by many websites to track visitor information A tracking cookie is a cookie which keeps tracks of all your browsing information and this is used by hackers and companies to know all your personal details like bank account details, your credit card information etc. which is dangerous .

Misleading applications: - Misleading applications misguide you about the security status of your computer and shows you that your computer is infected by some malware and you have to download the tool to remove the threat. As you download the tool it shows some threats in your computer and to remove it you have to buy the product for which it asks some personal information like credit card information etc. which is dangerous.

 

 

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Jul 30, 2017 06:30 AM

Malware has many forms - https://www.qilnix.com/malicious-malware-many-forms/

May 27, 2015 06:27 AM

very nice article
 

Mar 18, 2014 03:33 PM

Very usefull post.Short and clear

Feb 04, 2013 09:41 AM

Very Useful information...Thanks a lot

Dec 26, 2011 01:01 PM

Liked it thanks :)

May 13, 2011 01:30 PM

@ athomasimage, Please visit the Norton Community, there are many experts with the 360 and NIS products there to help you.

http://bit.ly/NortonUserCommunity

 

Best,

Thomas

May 12, 2011 01:55 PM

I've spent an hour searching Google and Norton Help for this answer with NO RESULTS.

OK, After a scan, Norton 360 shows a File Insight panel.  In the panel under "Activity" it will report all the tracking cookies that have been removed. 

1 - In your help link from the File Insight panel it does not even show the panel as it appears in the application software?????

2 - Some of the tracking cookies listed in the report, some are "bolded" and some aren't.  Why the bolded ones???  Go to your site search feature and type in "Why does Norton 360 list tracking cookies in bold"  and see the no hwere even close stuff that comes up.

3 - After a scan, I put the "name.link.com/net" in my list of restricted sites (IE8/XP).  But norton 360 allows them to get back onto my computer.  What's this all about.  Can't 360 block them?????

May 06, 2011 09:16 AM

@ RMB78, Please start a thread in the Norton Community for your Norton Product issue.

This is the Security Article section of the Enterprise support site.

http://bit.ly/NortonUserCommunity

 

Best,

Thomas

Apr 21, 2011 05:04 PM

I downloaded a program to keep my kid honest but since I up graded norton it will not allow me to access the program I payed good money for. How do I get Norton 360 to not see the program running in the background? I really can't afford to just say oh well and give up on it especially with aa teenager on the computer I really do not want him getting into certain things. How do I by pass norton to reload this program I tried going into quarentine and allowing the program but i still can not get it to run without ending up removing the program

Dec 23, 2010 09:44 AM

Thanks ! smiley

Dec 22, 2010 10:31 AM

Very useful article =]

Thanks for the share!

Dec 21, 2010 09:26 PM

Thanks for your useful information

Nov 09, 2010 04:51 AM

This is a very useful article. very comprehensive. Thanks for the detailed description for each.  

Oct 11, 2010 06:56 AM

Thanks for the info. This will help us avoid the malicious files we will encounter.

Sep 11, 2010 09:38 AM

Very Useful information...Thanks a lot

Jun 29, 2010 12:23 AM

Sincere thanks for the comprehensive coverage on different malware. It would be great if you could extend this artlcle with tips to tackle such, prevent malware etc.

May 07, 2010 08:58 AM


good information

Dec 31, 2009 06:56 AM

Very Detailed Information Can U plese Summerize the information ....

Sep 04, 2009 08:28 AM

nice one! =)

Jul 30, 2009 01:44 AM

thanks! this is just what I want.

Jul 08, 2009 09:57 AM

Great post!

Jul 08, 2009 08:15 AM

 Thank for update

Related Entries and Links

No Related Resource entered.