How to distinguish one malware from another

[Объединенное Детективное Бюро]

What do users really know about viruses, spyware, trojans and worms? The answer is "almost nothing." Often, one concept is replaced by another, or collectively referred to simply as “viruses,” while their mechanisms of action and distribution are fundamentally different from each other. Rformer is a translation of an article by Lifehacker that focuses on the differences between different types of malware. What is malware in general? This is a general term used to describe all viruses, worms, spyware, and other programs specifically designed to harm your computer or steal personal information. The virus creates chaos in your files. The term “computer virus” is often used as a synonym for “malware,” although in fact these phrases have different meanings. Strictly speaking, a virus is a program that copies itself and infects a computer, is transferred from one file to another, and then from one computer to another. Most viruses attach themselves to executable files, but some can target the MBR sector of the hard drive, register themselves in startup files, MS Office macros, and sometimes in completely arbitrary files. Many of these viruses, such as the well-known CIH, are designed to make your computer completely inoperative. Others simply delete or damage your files - in general, the goal of any virus is to create chaos on your PC and hack. You can protect yourself from viruses by installing anti-virus applications with constantly updated virus databases. You should also avoid running suspicious files that came in by email or otherwise. Pay special attention to the file extension: if it should be mp3, but looks like Mp3.exe, then with almost one hundred percent certainty you can say that you are dealing with a virus. Spyware steals your personal information Spyware (spyware) is any software installed on a computer that collects information without your knowledge and then sends it back to its creator so that it can use it as it sees fit. It can be a keylogger - a program that steals your password when you type it on your keyboard, watches your search queries, habits, changes your browser homepage and search pages, adds annoying toolbars or just steals your passwords and credit card numbers. Spyware is designed primarily to make money with your help, but without harming your computer - in fact, many people work on a computer with installed spyware without even knowing about it. But if you have one such program, then it will install a dozen more of the same. In addition, your computer may start to run slower. Another thing that many people don’t understand is that not every antivirus can catch a spy. Check if your anti-malware program performs this function. If your computer is already infected, run the MalwareBytes and SuperAntiSpyware programs for a complete cleanup. Pseudo-antiviruses require a ransom Pseudo-antiviruses (Scareware) are a new type of attack in which the user thinks that he is downloading antivirus software. After installation, the program reports that your computer is infected with hundreds of viruses, and you can clean it only by purchasing a full license. Of course, this fake antivirus is nothing more than another type of malware that keeps your PC hostage until you pay a ransom - in most cases you cannot remove this infection from your computer. If you encounter a computer infected with a pseudo-anti-virus, it is best to ask Google the name of the virus and find the exact instructions on how to remove it. But in the general case, the steps are basically universal: launch MalwareBytes, SuperAntiSpyware, and maybe ComboFix if necessary. Trojans create a “back door” “Trojan horses” look as if they are doing something completely harmless, but secretly download malicious code to the computer that does something exactly the opposite. In many cases, the trojan creates a “back door” that allows you to control your PC remotely, directly or as part of a botnet (a computer network where all computers are also infected with trojans or other malicious programs). The main difference between a virus and a trojan is that the trojan does not multiply, it must be installed directly by the user. Once your PC is infected with a trojan, it can already be used for various malicious purposes, such as a DoS attack on a website, as a proxy server to hide these attacks or, even worse, to send a lot of spam. Protection against trojans works the same way as against viruses. Make sure that your antivirus is up and running, do not launch suspicious attachments and think carefully before downloading and launching the cracker for Photoshop, cracks are one of the favorite places for virus writers to hide trojans. Worms crawl across the Network Computer worms use networks to send mass copies of themselves to other PCs, using security holes to travel from host to host without user intervention. Since they can spread all over the Web, infecting every PC in its path, they can be considered the most common type of malware, although many users give this title to viruses. Among the most famous creeping reptiles are the ILOVEYOU worm, which is transmitted by e-mail as an attachment (causing damage of more than $ 5.5 billion), Code Red, which infected 359 thousand websites, SQL Slammer, which paralyzed the Internet for a short period of time, and Blaster, which repeatedly rebooted the PC Since worms exploit network vulnerabilities, they can be called one of those types of software that can be stopped using a firewall - but you still need to update your antivirus software.

 

[Матушкин Андрей Николаевич]

Thank!