Where to begin…? This topic deserves a book, or perhaps a collection of books. But somehow I hope to provide some useful, consolidated information without getting too technically involved. We'll start with the basics: definitions. We hear many different terms (which are often misused), and it can be useful to know what they all mean.
Malware: Short for malicious software, malware is an all-encompassing term for any software that does bad things without your permission. Malware comes in many flavors, including the following –
Computer Virus: A computer virus, like its namesake, is contagious. Similar to biological viruses, computer viruses typically attach themselves to a host (program) and modify that program to suit the needs of the virus. It can and will spread from one computer to another. The spreading of computer viruses typically happens via email or infected websites. Back in the day, you had to click something or download something to become infected. Today all you have to do is view a website or email and you can become infected.
Worms: Worms are similar to viruses in that they reproduce themselves. Unlike a virus, a worm does not need to attach itself to a host-program. Worms find security gaps in other computers on the network and send copies of themselves without any user intervention. Generally speaking, worms target network infrastructures and viruses target individual computers and files.
Trojan Horse: Think Greek Mythology. This is malware that is delivered under the guise of legitimate software. It comes in many forms, including the infamous email attachment, "free" software downloads, ActiveX controls on websites, less-than-legal music/file sharing networks, etc. Trojans can also be viruses, finding ways to self-replicate. Their mission: gain control of your computer and use it for any of the following – distribute spam, steal your credit card information, watching your computer screen, destroying data, etc.
Spyware: No surprise here; spyware is designed to spy on you. Usually the goal of spyware is to collect information about your Internet browsing habits which is then used for targeted marketing purposes. Spyware can go beyond gathering personal information and actually interfere with your ability to control the computer. For example, if you attempt to visit an anti-malware website, you may be redirected to another site, thus preventing you from removing the spyware. It commonly comes as a Trojan in the form of Internet Toolbars or file sharing applications such as Kazaa, etc.
Adware: Adware is annoying but generally harmless. However, it is often bundled with the more intrusive Spyware. Its objective is to display targeted advertisements, usually in the form of pop-ups, generating revenue for the bad guys who built the adware. Not all adware is malware. Some legitimate organizations use adware to support otherwise free software. Recently, Microsoft began distributing a free version of Office (Office Starter Edition) with new computers. Aside from some feature limitations, the only catch is that you will see some ads rotating on the lower-right side of the window. The ads are mostly about upgrading to the paid version of office. It's legitimate, there is no spyware, and it lets you use the program for free. This is the only version of adware that I have ever endorsed in my life!
CrimeWare: This is very similar to spyware, but specifically designed for identity theft. Crimeware allows the bad guys to steal bank account information. Unlike spyware, crimeware is typically very targeted and will appear to come from someone you know as an email attachment. These guys first learn who you are, then use personal information to gain your trust. After they manipulate you into installing their malware, they steal user names and passwords to financial websites. With access to your online accounts, they can drain your account in seconds.
Rootkits: In an attempt to keep this article from being too technical, I'll just say that rootkits allow bad guys to get "root" or privileged access to a computer while bypassing much of the Operating System altogether. If you want more technical information on Rootkits, I will refer you to Wikipedia, the source of all wisdom: http://en.wikipedia.org/wiki/Rootkit. Removing a rootkit typically involves completely erasing the hard drive and reinstalling all programs.
Are we having fun yet? Just writing this stuff makes me want to throw my computer out the window and go back to the stone ages. There is no way to sugar-coat this: there is a lot of bad stuff out there. Unfortunately, going back to the stone ages isn't really an option for most of us. So, now what?
In Part 2 we'll discuss preventive measures that can be taken. Yes, it's ugly out there. But armed with a bit of knowledge, we can fight back!
Comments