Upload File

viruses & malware

24

Upload: tj-schiel

Post on 16-Jul-2015

206 views

Category:

Education


4 download

Report

Tags:

TRANSCRIPT

Page 1: Viruses & Malware
Page 2: Viruses & Malware

The term malware is a combination of the words malicious and software. Malware is any type of software intended to cause harm to your computer that is installed without the

user knowing.

Page 3: Viruses & Malware

Computer viruses

Worms

Trojan horses

Spyware

Adware

Any other type of malicious & unwanted software.

Page 4: Viruses & Malware

A virus is a computer program that has the ability to duplicate and infect a computer without

the user knowing.

Page 5: Viruses & Malware

Resident

Direct Action

Overwrite

Boot

Macro

Directory

Polymorphic

File Infectors

Companion

Fat

Logic Bombs

Page 6: Viruses & Malware

This type of virus is a permanent which dwells in the RAM memory. From there it can overcome and interrupt all of the operations executed by the system: corrupting files and programs that are opened, closed, copied, renamed etc.

Examples include: Randex, CMJ, Meve, and MrKlunky.

Page 7: Viruses & Malware

The main purpose of this virus is to replicate and take action when it is executed. When a specific condition is met, the virus will go into action and infect files in the directory or folder that it is in and in directories that are specified in the AUTOEXEC.BAT file PATH. This batch file is always located in the root directory of the hard disk and carries out certain operations when the computer is booted.

Page 8: Viruses & Malware

Virus of this kind is characterized by the fact that it deletes the information contained in the files that it infects, rendering them partially or totally useless once they have been infected.

The only way to clean a file infected by an overwrite virus is to delete the file completely, thus losing the original content.

Examples of this virus include: Way, Trj.Reboot, Trivial.88.D.

Page 9: Viruses & Malware

This type of virus affects the boot sector of a floppy or hard disk. This is a crucial part of a disk, in which information on the disk itself is stored together with a program that makes it possible to boot (start) the computer from the disk.

The best way of avoiding boot viruses is to ensure that floppy disks are write-protected and never start your computer with an unknown floppy disk in the disk drive.

Examples of boot viruses include: Polyboot.B, AntiEXE.

Page 10: Viruses & Malware

Macro viruses infect files that are created using certain applications or programs that contain macros. These mini-programs make it possible to automate series of operations so that they are performed as a single action, thereby saving the user from having to carry them out one by one.

Examples of macro viruses: Relax, Melissa.A, Bablas, O97M/Y2K.

Page 11: Viruses & Malware

Directory viruses change the paths that indicate the location of a file. By executing a program (file with the extension .EXE or .COM) which has been infected by a virus, you are unknowingly running the virus program, while the original file and program have been previously moved by the virus.

Once infected it becomes impossible to locate the original files.

Page 12: Viruses & Malware

Polymorphic viruses encrypt or encode themselves in a different way (using different algorithms and encryption keys) every time they infect a system.

This makes it impossible for anti-viruses to find them using string or signature searches (because they are different in each encryption) and also enables them to create a large number of copies of themselves.

Examples include: Elkern, Marburg, Satan Bug, and Tuareg.

Page 13: Viruses & Malware

This type of virus infects programs or executable files (files with an .EXE or .COM extension). When one of these programs is run, directly or indirectly, the virus is activated, producing the damaging effects it is programmed to carry out. The majority of existing viruses belong to this category, and can be classified depending on the actions that they carry out.

Page 14: Viruses & Malware

Companion viruses can be considered file infector viruses like resident or direct action types. They are known as companion viruses because once they get into the system they "accompany" the other files that already exist. In other words, in order to carry out their infection routines, companion viruses can wait in memory until a program is run (resident viruses) or act immediately by making copies of themselves (direct action viruses).

Some examples include: Stator, Asimov.1539, and Terrax.1069

Page 15: Viruses & Malware

The file allocation table or FAT is the part of a disk used to connect information and is a vital part of the normal functioning of the computer. This type of virus attack can be especially dangerous, by preventing access to certain sections of the disk where important files are stored. Damage caused can result in information losses from individual files or even entire directories.

Page 16: Viruses & Malware

A computer worm is a self-replicating computer program. It uses a network to send copies of itself to other nodes (computers on

the network) and it may do so without any user intervention. Unlike a virus, it does not need to attach itself to an existing

program. Worms almost always cause at least some harm to the network, if only by consuming bandwidth, whereas viruses

almost always corrupt or modify files on a targeted computer.

Page 17: Viruses & Malware

The term Trojan refers to the classical story of the Trojan horse in the battle of Troy. A Trojan describes a class of computer

threats (malware) that appears to perform a desirable function but in fact performs undisclosed malicious functions that allow

unauthorized access to the host machine, giving them the ability to save their files on the user's computer or even watch the

user's screen and control the computer.

Page 18: Viruses & Malware

Remote Access

Data Destruction

Downloader/dropper

Server Trojan(Proxy, FTP , IRC, Email, HTTP/HTTPS, etc.)

Disable security software

Denial-of-service attack (DoS)

Page 19: Viruses & Malware

Spyware is computer software that is secretly installed on your computer to monitor your

internet usage and behavior.

Page 20: Viruses & Malware

While the term spyware suggests software that secretly monitors the user's behavior, the functions of spyware extend well beyond simple monitoring. Spyware programs can collect various types of personal information, such as Internet surfing habits, sites that have been visited, but can also interfere with user control of the computer in other ways, such as installing additional software, and redirecting Web browser activity. Spyware is known to change computer settings, resulting in slow connection speeds, different home pages, and/or loss of Internet or functionality of other programs. In an attempt to increase the understanding of spyware, a more formal classification of its included software types is captured under the term privacy-invasive software.

Page 21: Viruses & Malware

AntiVirus 360

Antivirus 2008

Antivirus 2009

AntiVirus Gold

ContraVirus

Errorsafe

MacSweeper

PAL Spyware Remover

Pest Trap

PSGuard

Spy Wiper

Spydawn Spylocked Spysheriff SpyShredder Spyware Quake SpywareStrike UltimateCleaner WinAntiVirus Pro 2006 WinFixer WorldAntiSpy

Page 22: Viruses & Malware

Adware is any software package which automatically plays, displays, or downloads advertisements to a

computer after the software is installed on it or while the application is being used. Some types of adware

are also spyware and can be classified as privacy-invasive software.

Page 23: Viruses & Malware

123 Messenger 180SearchAssistant 888bar Adssite Toolbar AOL Instant Messenger Antivirus 200 Family Bearshare Bonzi Buddy BlockChecker Burn4Free ClipGenie Comet Cursor

Daemon Tools

Direct Revenue

DivX

DollarRevenue

Ebates MoneyMaker

ErrorSafe

Ezula

FlashGet

Gamespy Arcade

Gator

Kazaa

Page 24: Viruses & Malware

Messenger Plus! Live MessengerSkinner Micro Antivirus Mirar Toolbar Oemji Toolbar R RealPlayer Smiley Central TagASaurus TopMoxie Tribal Fusion Videothang Viewpoint Media Player VirusProtectPro

Viewpoint Media Player

VirusProtectPro

WeatherBug

WhenU

WinAce

WinFixer

Winzix

Wolfenstein enemy territory

Zango

Zango Toolbar

Zwinky


Malware, E-mail, Database Security · Malware • A general term for all kinds of software with a malign purpose – Viruses, Trojan horses, worms etc. ... – Currently the biggest

The Definitive Guide to Controlling Malware, Spyware ... · Macro viruses can infect any desktop application that supports macros, not just Microsoft Word. Several macro viruses infect

Malware: Scanners, Sniffers, Viruses, Worms, Mobile Code COEN 252 / 152: Computer Forensics

Cosc 4765 Viruses, Worms, and Malware.. Some History The early “viruses” were not viruses. They were code that accidentally did something it wasn’t supposed

Computer Security Seminar Lecture 2orrd/CompSecSeminar/2013/... · Malware Backdoors Defense Viruses Worms Trojan Rootkits Botnets Computer Viruses One of the eldest malicious threats

Chapter 8 Malware - FTMSMalware Types of Malware Viruses • A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. • Viruses

The Ultimate Protection Against Viruses and Malware...Active Protection STOPzilla AntiVirus 7.0 detects viruses and malware in real-time before it is even saved to the hard drive

VIRUSES and MALWARE

Malware Variant Detection - Semantic Scholar · Malware programs (e.g., viruses, worms, Trojans, etc.) are a worldwide epidemic. Studies and statistics show that the impact of malware

Part I Typical Concerns and Problems What Computer Users Want to Avoid Types of Malware Explained Symptoms of Malware: Viruses, Worms, Trojan

Cyber ransom. Viruses and malware. Hacktivism. Identity theft....2017/02/25  · Cyber ransom. Viruses and malware. Hacktivism. Identity theft. Reports of cybersecurity threats and

© 2006 Consumer Jungle Malware: Spam, Viruses, Spyware, Phishing, Pharming, Trojans, Worms, Backdoors, and Zombie Computers

10 Types of Malware Found Today -- Not Just Viruses

Modeling Malware Propagation in Networksmanmade.maths.qmul.ac.uk/publications/masa dec 2009... · 2011-04-06 · Key words: malware propagation, computer viruses, stochastic models,

How ESET protects you from today's advanced malware threats€¦ · system that quickly identifies and reports newly discovered viruses and malware, creating an instantaneous view

Malware Incident Handling & Forensics. Malware Types Viruses. A virus self-replicates by inserting copies of itself into host programs or data files

Malware Halting · 2017-05-16 · Malware—malicious software used to ... fraction of the computers to halt malware spreading 16. Epidemiological model We model viruses and worms

A Brief Rundown on Malware · A Brief Rundown on Malware 3 Viruses are the type of malware of which most people became aware first. A virus is self-replicating and is always imbedded

Computer Viruses and Malware · Dept. Computer Science 2500 University Drive N.W. CALGARY AB T2N 1N4 CANADA Library of Congress Control Number: 2006925091 Computer Viruses and Malware

CAP6135: Malware and Software Vulnerability Analysis Viruses Cliff Zou Spring 2011

SplitScreen: Enabling Efficient, Distributed Malware Detectiondga/papers/splitscreen-nsdi2010.pdfThe amount of malicious software (malware)—viruses, worms, Trojan horses, and the

Malware: Malicious Softwarecs.armstrong.edu/rasheed/ITEC2010/Slides7.pdf · Viruses, Worms, Trojans, Rootkits • Malware can be classified into several categories, depending on propagation

malware: Malicious Code - Uic Computer Sciencesloan/CLASSES/privacy/Malware.pdf · Malicious code: Viruses • Most famous type of malicious code • Malware Program that seeks out

How Malware and Viruses effect Our Systems

Mobile Offloading for Cloud-based Malware Detections with ...3 Malware: Viruses, trojans, spywares and other intrusive codes Aim to disrupt operations, access private information,

Viruses. Malware versus Virus Viruses belong to a larger category of software known as Malware, which is short for “malicious software” Computer viruses

Malware: Viruses - USALearning_v401/course/... · Malware: Viruses. Table of Contents ... programming (scripts, active content, or other software) ... So we have a trigger . mechanism

auto the ims THIS ISSUE · malware and viruses. Some great tips and reminders from this training include: Most people associate viruses and malware with computers or servers, but

Computer Viruses & Other Malware

Malware, Spyware, and Viruses

MTvScan (Malware , Trojan, Viruses Scanner) Enterprise Class Security Scanner

Malware: Viruses, Worms, & Botnets - Peopledawnsong/teaching/f12-cs161/lectures/lec-oct-10... · Malware: Viruses, Worms, & Botnets Computer Security Course. Dawn Song Slide credit:

community.netapp.comcommunity.netapp.com/fukiw75442/attachments/fukiw75442/... · Web viewMalicious software, commonly referred to as “malware”—including viruses, worms, and

Ms810 assignment viruses and malware affecting moblie devices

Using Malware Analysis to Tailor SQUARE for Mobile Platforms · 2 Survey of Mobile Malware 8 2.1 Classes of Mobile Malware 8 2.1.1 Trojans 8 2.1.2 Viruses 8 ... More than 650,000