Happy Trails Computer Club

home > security > overview > attack vectors > malware  
Other Malware: Trojans, Spyware, Dialers, Hijackers, Et al.
related page > anti-malware  

The term "malware" encompasses Trojans, adware, spyware, keyloggers, hijackers, dialers, and things of that ilk. Malware stems from malevolent, malicious or malignant -- take your pick. If you're curious about whats out there on the Internet, take a look at this list of threats, maintained by PestPatrol.

Virus attacks have declined this year (2003). Hostile software writers have graduated to more detrimental attacks, such as Trojan-horses and spyware. The number of these kinds of attacks has increased dramatically. There's almost too many types of Web site trickery to keep track of.

Spam techniques are now being used extensively to distribute viruses and worms. Melissa, Love Bug, and MyDoom are examples where malware uses spam techniques to propagate itself after being triggered by the user. Some viruses are designed to broadcast spam. For example, the SoBig worm installed software and then used it to relay spam.

Malware delivery

Malware can invade your computer using one or more "attack vectors", in particular email, email attachments, evil websites and evil hackers (the "4 E's"). Instant messaging, IRC (Internet Relay Chat) and P2P file-sharing networks are beginning to provide new routes of attack. These Internet services rely on cozy connections between your computer and others. That makes these services handy vectors for hostile exploits. [info]

More malware gets into computers from popup windows and other Web page chenanigans these days than from email attachments. Those of who are frequently online have gotten used to seeing popups or other notices from Web sites advising us that we need additional software to fix a problem, properly view a page, or some such malarkey. (Yeah, like I can really read Chinese characters if they were "displayed correctly".)

When asked if we want to download and install the software, clicking OK can be a reflex action. Spyware writers know this. They set their bait, and a lot of us go for it (picture a mouse with its neck in a trap at this point). Sometimes, there's a tempting offer we can't resist. It may be combined familiar graphics or a look-alike Web address that makes it look like something we can trust. You just can't be too careful these days. There's no limit to the deviousness these parasites can come up with. Treat it like spam. If you didn't ask for it, just ignore it.

Is your computer infested with malware?

Possibly. You can either install anti-malware software or go online to screen your computer for malware. The online tests take a while -- maybe as much as 30 minutes -- but the sites provide good advice on the results. It's a good idea to do both, especially if you have any suspicions.

Malware descriptions

Trojan horses are delivered by attachments, worms or hackers. They allow the Trojan master (or others) to control your computer remotely, including spying on you and stealing from you. Trojans are often used to attack other computers so that attacks can't be traced to the actual perpetrator.

Spyware has become the most common kind of malware after viruses. Spyware snoops while you use your computer and uses what it finds to take advantage of you in some way. Spyware is generated by "bottom-feeders" of various ilks (some of them at major companies). Spyware often contains defective code, and it can bog down your computer or make it prone to crash. Keyloggers are a form of spyware. They capture and pass along your keystrokes.

Adware is freeware that displays ads while you use it. It often sneaks spyware in with it.

Dialers hijack your modem and dial offshore numbers or premium services. The end result can be huge charges, which are nearly impossible to get removed.

Browser hijackers set browser home pages and search settings to the perpetrator's site or to sites that are in collusion with them.

It's not very important to understand exactly what each of these categories of malware does. It's more important to keep all of it off your computer. The next page will help you do that.

related page > anti-malware  

Resources

"He who hesitates is probably right." -- Curmudgeon
club stuff
help
topics
computers
software
hardware
internet
security
overview
   lost? > index
attack vectors
   attachments
   deception
   email
   hackers
   web sites
   worms
defenses
   #  2  3
safe settings
   system
   browser
   email client
safe practices
   patching
   email
   attachments
   surfing
   file handling
defense tools
   malware
   antivirus
   anti-trojan
   firewalls
defense tests
privacy
resources