Thread: Malware
View Single Post
Old 24-11-2007, 02:32 AM   #5
eager
Guest
 
Posts: n/a
Re: Malware


"Todd H." <comphelp@toddh.net> wrote in message
news:84ir3tznto.fsf@ripco.com...
> "eager" <eager@beaver.it> writes:
>
>> My friend's computer, running XP Media Centre 2002, was infected with
>> Malware, viruses, and Trojan horses
>> His Norton had expired long time ago. I downloaded and installed Antivir,
>> the free version, did a system recovery and free online scanning using
>> Trend
>> Micro HouseCall.
>>
>> I also suggested my friend to take his computer to a computer store to
>> format the HDD and re-install windows, because he did not have a winXP
>> CD.
>> Probably he did not get a CD when he purchased his computer.

>
> What's the make/model? Typically you can get replacement CD's at a
> rather nominal cost, sometimes free (e.g. HP or Compaq business
> pc's).



It's a compaq


>
> This machine needs a fresh OS.


Average home users do not back up data and, when it comes to this point,
they do not want to lose their songs...; they do not want to pay much money
either.... . My friend had norton (hate it) and when it expired, he
procastrinated ...
Well, he is a teenager, the son of my wife's friend; my wife, who _thinks_
that I know about computers, got me in trouble. lol

Mr.Lipman has posted numerous times about cleaning up infected computers,
just have to find his threads .... I am still wondering though, why I was
not able to start the PC in safe mode? Was the boot sector infected ... or
... something else?


>
>> I am trying to find some info regarding what is a malware, how does it
>> damage the computer and what are the symptoms?
>> What is the difference between the malware and the viruses?

>
> If you think of a virus as just one possible type of malware, you'll
> be in good shape.


Thank you Mr. Todd!

>
> Read some more in wikipedia to do your own comparison of the terms:
>
> Computer Virus
> http://en.wikipedia.org/wiki/Computer_virus
>
> Computer Worm
> http://en.wikipedia.org/wiki/Computer_worm
>
> So technically, a virus isn't necessarily malware



Now you are confusing me, man

(it's defined
> typically as code that can self-replicate and attach itself to another
> existing host program, without regard to its badness or goodness).
> But in the lexicon used by normal people (who aren't pointy headed and
> hang out in security newsgroups just to disagree with people or engage
> in protracted semantic debates) it's become synonymous with it,
> e.g. "anti-virus" software meaning software that attempts to detect
> and thwart programs you don't want/need/or that do bad stuff.
>
> And likewise, a worm is self-replicating code that doesn't necessarily
> attach itself to another program like a virus would.


Yes, I read about the difference between these two and they have two major
dofferences:
1. A virus attaches itself to a document and is spread by travelling along
with the document. A worm can travel by itself.
2. A virus needs the user to perform some type of action, to start the
infection. A worm can replicate itself until it clogs all the available
resources.

still wandering though, how can a worm travel by itself, where does it find
the energy, how does it find the way? we could use worms instead of cars,
ships and planes ) or at least, apply the idea ...

>
>> I know that Trojan horses are kind of spyware and do not damage the
>> computer, worms are dangerous for networks rather than for a stand-alone
>> PC,
>> etc.

>
> A Trojan horse is more simply defined than that. It's generally a
> program that purports to do one thing, but actually does something
> else or more than that thing. THe definition speaks to a delivery
> mechanism more so than what the program does.
>
> And spyware is more defined in terms of functionality--in that it does
> some harvesting of personal information in one way or another. It's
> not as well defined as the other terms discussed here.
>
> Trojan Horse
> http://en.wikipedia.org/wiki/Trojan_horse_(computing)
>
> Spyware
> http://en.wikipedia.org/wiki/Spyware
>
>> I am also trying to understand the difference between access deny, delete
>> and move to quarantine options.

>
> Those terms would require knowing which Anti-virus or anti-malware
> program you're speaking of, but a reasonable guess is that access deny
> does nothing to the file, except the AV program tellst eh operating
> system not to open the file whenever a program calls to open it.
> Delete would aim to remove the file from teh disk (which may or may
> not be possible). Quarantine, in most software connotes moving the
> file to a "vault" so that in case a good file is mistakenly flagged
> as bad, it could be removed from quarantine. In a delete option, the
> file is deleted with no recovery (easily) possible.



Thank you!

>
> I imagine the terms you brought up will generate lots of debate and
> response though, that you may take with a grain of salt (this post
> included if you like). Nothing like definition questions to give
> those who love to point out things that are wrong a chance to try to
> prove their intellect. Pointing out something that's wrong, after
> all, is the easiest way to be right, isn't it? And we all love bein
> right!
>
>
> Best Regards,
> --
> Todd H.
> http://www.toddh.net/



  Reply With Quote