"eager" <eager@beaver.it> writes:
> My friend's computer, running XP Media Centre 2002, was infected with
> Malware, viruses, and Trojan horses
> His Norton had expired long time ago. I downloaded and installed Antivir,
> the free version, did a system recovery and free online scanning using Trend
> Micro HouseCall.
>
> I also suggested my friend to take his computer to a computer store to
> format the HDD and re-install windows, because he did not have a winXP CD.
> Probably he did not get a CD when he purchased his computer.
What's the make/model? Typically you can get replacement CD's at a
rather nominal cost, sometimes free (e.g. HP or Compaq business
pc's).
This machine needs a fresh OS.
> I am trying to find some info regarding what is a malware, how does it
> damage the computer and what are the symptoms?
> What is the difference between the malware and the viruses?
If you think of a virus as just one possible type of malware, you'll
be in good shape.
Read some more in wikipedia to do your own comparison of the terms:
Computer Virus
http://en.wikipedia.org/wiki/Computer_virus
Computer Worm
http://en.wikipedia.org/wiki/Computer_worm
So technically, a virus isn't necessarily malware (it's defined
typically as code that can self-replicate and attach itself to another
existing host program, without regard to its badness or goodness).
But in the lexicon used by normal people (who aren't pointy headed and
hang out in security newsgroups just to disagree with people or engage
in protracted semantic debates) it's become synonymous with it,
e.g. "anti-virus" software meaning software that attempts to detect
and thwart programs you don't want/need/or that do bad stuff.
And likewise, a worm is self-replicating code that doesn't necessarily
attach itself to another program like a virus would.
> I know that Trojan horses are kind of spyware and do not damage the
> computer, worms are dangerous for networks rather than for a stand-alone PC,
> etc.
A Trojan horse is more simply defined than that. It's generally a
program that purports to do one thing, but actually does something
else or more than that thing. THe definition speaks to a delivery
mechanism more so than what the program does.
And spyware is more defined in terms of functionality--in that it does
some harvesting of personal information in one way or another. It's
not as well defined as the other terms discussed here.
Trojan Horse
http://en.wikipedia.org/wiki/Trojan_horse_(computing)
Spyware
http://en.wikipedia.org/wiki/Spyware
> I am also trying to understand the difference between access deny, delete
> and move to quarantine options.
Those terms would require knowing which Anti-virus or anti-malware
program you're speaking of, but a reasonable guess is that access deny
does nothing to the file, except the AV program tellst eh operating
system not to open the file whenever a program calls to open it.
Delete would aim to remove the file from teh disk (which may or may
not be possible). Quarantine, in most software connotes moving the
file to a "vault" so that in case a good file is mistakenly flagged
as bad, it could be removed from quarantine. In a delete option, the
file is deleted with no recovery (easily) possible.
I imagine the terms you brought up will generate lots of debate and
response though, that you may take with a grain of salt (this post
included if you like). Nothing like definition questions to give
those who love to point out things that are wrong a chance to try to
prove their intellect. Pointing out something that's wrong, after
all, is the easiest way to be right, isn't it? And we all love bein
right!
Best Regards,
--
Todd H.
http://www.toddh.net/