Thread: Malware
View Single Post
Old 24-11-2007, 03:28 PM   #8
Tim Jackson
Guest
 
Posts: n/a
Re: Malware

eager wrote:

> I have also found, "malware = malicious code = computer programs created to
> break into computers or to create havoc on computers. The most common
> types of malware are viruses, worms, logic bombs, Trojan horses, and back
> doors."
>
> So, code, software, program seem to be used interchangeably .... On the
> other hand, when I scanned the computer for viruses, using AntiVir, I got
> different warnings for viruses, different warning for trojan horses and
> different warning for malware. Confusing, isn't it?
>


It's all very simple really, but confused by, among others, those who
want to muddy the water so as make their wizardry seem more amazing, and
saleable. Sometimes the metaphors get in the way of the facts.

Software is any sort of program which is not physically built into a
machine. And sometimes the word includes programs that are built in,
like the BIOS in a PC. "Ware" meaning something that can be bought and
sold independently, "soft" meaning intangible.

Malware is any program that is supplied with intent to harm, which is
somewhat subjective, so lets say its any software you acquire unwillingly.

Malware is classified by it's method of propagation and its intent or
function. The categories are not mutually exclusive, and
self-propagating programs are not always written with harmful intent.
Most malware will consist of one or more parts which perform propagation
and a "payload" which performs the damage.


A virus is a piece of software that attaches itself to another program
so that when that is run, it runs the virus again which copies itself
into any other programs that are visible to it at that time. Thus if
the program is copied to a 'clean' machine and run, it infects all the
other executables on that machine.

A trojan horse is a program which purports to be something it isn't in
order to get the user to run it, most commonly an email attachment.

A worm is a program that explores a network to seek out other computers
to copy itself onto.

A back door is a program which once installed provides unauthorised
access to a computer. This is used to create zombies, (also known as
'bots or bot-nets), which are computers that have a back door installed
to allow unauthorised control for such purposes as the sending of spam.

Spyware is software that once installed records information about the
computer and it's use and report it back to a remote site, without the
user's knowledge. This could be simply gathering marketing information,
or it could be something more hostile like keystroke (i.e. password)
recording.

Adware is software that once installed periodically presents unsolicited
advertising to the user, eg by pop-up windows. This is used as source
of revenue to pay for allegedly 'free' software.


Tim Jackson
www.tim-jackson.co.uk
  Reply With Quote