The difference between Virus, Malware, Trojan, Worm etc.

[hackerman1]

I couple of years ago i got an email from Emsisoft with their latest newsletter,
it´s a very good explanation of the terms commonly used:

---

The terms “anti-virus” and “anti-malware” which are used in a lot of protection software are, unfortunately, quite confusing.
Some users are led to believe that anti-virus solutions are more effetctive than those that protect against malware,
whereas the latter actually is the generic term.
The matter is even more complicated as, nowadays, all common anti-virus software also protects against other kinds of malware.
What’s more: the term “anti-malware” is sometimes also used for software that offers no comprehensive protection against all kinds of threats, but merely specializes on one category, or on persistent malware.

Everyone knows about viruses, and almost everyone is familiar with trojans, spyware or adware.
But what about rootkits, ransomware and rogues ?
In the following you will be given a short introduction to different kinds of malware.

Virus
A computer virus spreads itself by smuggling its code into another program.
The name is an analogy to its biological counterpart.
Not only does a computer virus spread many times and make the host software unusable, but also exhibits malicious behavior.

Trojan horse/Trojan
A Trojan horse is a type of malware that is disguised as a useful program.
The goal is for the user to execute the Trojan, allowing it to take full control of your PC and use it for its own agenda.
This typically results in the installation of additional malware (such as backdoors or keyloggers) to your system.

Worm
Worms are malicious software that aim at spreading as fast as possible once your PC has been infected.
Unlike viruses, they don’t require a host program, but instead spread themselves via storage devices,
such as USB sticks, or communication media such as e-mail or vulnerabilities in your OS.
Their propagation causes a reduction in the performance of PCs and networks, and they may also implement direct malicious behavior.

Keyloggers
Keyloggers secretly record everything you type on your keyboard,
which allows attackers to get their hands on your passwords or other important data such as online banking details.

Dialers
Dialers are relics from the days when modems or ISDN were the standard way of connecting to the internet.
They dialed expensive premium-rates numbers, racking up astronomical telephone bills,
and causing enormous financial damage to their victims.
Dialers are ineffective with ADSL or cable connections, which is why they are mostly considered extinct these days.

Backdoor/Bot
A backdoor is a portion of code that is usually implemented into a program by the software’s author,
to enable access to your PC or an otherwise protected software function.
Backdoors are often installed by Trojans once they have been executed, so that the attacker can gain direct access to your PC.
The infected PC, also known as a “bot”, becomes part of a botnet.

Exploit
Exploits are used to systematically exploit vulnerabilities in a computer program.
Using them, an attacker can gain either partial or full control of your PC.

Spyware
Spyware is software that spies on you, i.e. by collecting various types of user data from your PC without your knowledge.

Adware
Adware is derived from the word “advertisement”.
In addition to the actual function of the program, the user will be presented with advertisements.
Adware itself is not dangerous, but the display of countless adverts is generally considered undesirable,
and is thus detected by good anti-malware solutions.

Rootkit
A rootkit usually consists of several components that grant the author unauthorized access to the target system.
In addition, these programs hide their processes and actions using other software.
They can be installed, for instance, through an exploit or a Trojan.

Rogues/Scareware
Also known as “Rogue Anti-Spyware” or “Rogue Anti-Virus”, rogues pretend to be security software.
They frequently use fake warnings to trick users into purchasing the software, which the attackers then profit from illegally.

Ransomware
Ransomware” is exactly what it sounds like.
Ransomware encrypts the user’s personal data or may even lock the entire PC.
You are asked to pay a “ransom” via an anonymous service in order to unlock your computer.

This is just a part of the newsletter, for the full text go their website: Malware and viruses – what is the difference ?

[Author]

Posts