Wednesday, September 22, 2004
Virus Terms
Certain terms used to describe online threats can be confusing. Here's an easy understand glossary of commonly used words that are related to Internet security.
Virus: A program that replicates itself across a network, or the Internet. The virus payload may be destructive, like deleting files, or it could simply try to overwhelm a network by copying itself. A Virus typically spreads itself by attaching itself to emails that it sends out using your address book on your computer. The virus will randomize the To: and From: fields of the email it sends out in order to keep people in your address book from realizing and warning you that YOU are the culprit that has been sending all that virus-infected email to them. In general do not open any attachments unless you are expecting something from someone you know.
Virus signature: The "fingerprints" of a virus, which antivirus programs use to identify and isolate viruses. Users should regularly update their antivirus programs online to download the latest virus signatures, so they're protected against new viruses. Typically most virus software companies give you a 1-year subscription to their servers to download these virus signatures. BEFORE this subscription expires you must renew your subscription in order to keep your virus signatures up-to-date. Anywhere from 2 to 10 new viruses are discovered each day and if you do not have the latest virus signatures your chances of getting infected increase every day.
Worm: A virus that replicates itself without human intervention. If the victim has to open an e-mail attachment to get infected, it's a virus. But if it scans for new victims and attacks by itself, it's a worm. Worms spread through a network and will typically infect every computer attached to that network unless that computer is protected by some Antivirus software.
Trojan: A program that doesn't necessarily replicate itself, but like the legendary wooden "Trojan horse" is much more than it appears. A Trojan program might look like a game, but instead it steals your personal information and sends it to a criminal.
Password sniffer: A file that seeks out passwords on your computer, then sends them to a hacker. A keylogger can also grab anything typed on the keyboard.
Blended threat: A program that combines the characteristics of viruses, worms and Trojan horses. An example of a blended threat was the Nimda virus outbreak.
Exploit: A program that takes advantage of a security hole in a computer program, like Microsoft Windows or AOL Instant Messenger.
Spyware / Adware: General terms for a program that surreptitiously monitors your actions. While they are sometimes sinister, like a remote control program used by a hacker, software companies have been known to use spyware to gather data about customers. Spyware typically seizes a great deal of your CPU's processing time and Internet bandwidth eventually slowing your computer down to a point that it will be rendered useless to you. A main source of spyware comes from allegedly free programs that you be download off the Internet. One of the primary sources of spyware is from free versions of Music Sharing programs such as Kazaa, Morphis, Bearshare, Limewire, Madster, Grokster, and WinMX to name a few. Even Real Player and Windows Media Player have components that are considered spyware.
