Understanding the Various Types of Malware

Definitions and A Brief Introduction to the Dangers oftake partial control over the user's interaction with the
Malwarecomputer, without the user's informed consent. While
1. Introduction.the term spyware suggests software that secretly
The ever increasing use of the Internet means moremonitors the user's behaviour, the functions of
and more computers can be accessed by othersspyware extend well beyond simple monitoring.
through file transfers, e-mails and websites, leavingSpyware programs can collect various types of
them susceptible to infection from an increasingpersonal information, such as Internet surfing habit, sites
number of viruses, Trojan Horses, worms, adware,that have been visited, but can also interfere with user
spyware, etc. These terms can be very confusing ascontrol of the computer in other ways, such as
each one is different in characteristics and will causeinstalling additional software, redirecting Web browser
different problems or damage to your computer.activity, accessing websites blindly that will cause more
People will tend to be more on the lookout for theseharmful viruses, or diverting advertising revenue to a
threats if they understand what they are and theirthird party. Spyware can even change computer
potential dangers. This article attempts to clarify thesettings, resulting in slow connection speeds, different
meaning of each of these terms. After reading thishome pages, and loss of Internet or other programs. In
article it is strongly suggested that you visit for furtheran attempt to increase the understanding of spyware,
information on how to protect your PC against thisa more formal classification of its included software
dangerous class of software. Your bank account andtypes is captured under the term privacy-invasive
identity are ultimately at risk if you do not take action.software.
2. MalwareIn response to the emergence of spyware, a whole
Many normal computer users are still unfamiliar withindustry has sprung up dealing in anti-spyware
the term ‘malware” and most never use it.software. Running anti-spyware software has
Instead, "computer virus" is incorrectly used, even in thebecome a widely recognized element of computer
media to describe all kinds of malware, though not allsecurity best practices for Microsoft Windows
malware are viruses.desktop computers. A number of jurisdictions have
Rather than being defined by any particular features,passed anti-spyware laws, which usually target any
software is considered malware if the perceived intentsoftware that is surreptitiously installed to control a
of the creator is to cause damage. Malware includesuser's computer. Threats vary from the systematic
computer viruses, worms, trojan horses, most rootkits,capture of everyday events (e.g., what online sites that
spyware, dishonest adware, and other malicious andare visited or what items that are purchased from
unwanted software. In law, malware is sometimesonline stores) to the mass marketing based on the
known as a computer contaminant, for instance in theretrieval of personal information (spam offers and
legal codes of California, West Virginia, and severaltelemarketing calls are more common than ever) to
other American states.the distribution of information on lethal technologies
Malware is software designed to infiltrate or damageused for, e.g., acts of terror.
a computer system without the owner's informedToday, software-based privacy-invasions occur in
consent. It is a shortened combination of the wordsnumerous aspects of Internet usage. Spyware
malicious and software. The expression is a generalprograms set to collect and distribute user information
term used by professionals in the computer industry tosecretly download and execute on users’
cover a variety of hostile, intrusive, or annoyingworkstations. Adware displays advertisements and
software or program code.other commercial content often based upon personal
Malware should not be confused with defectiveinformation retrieved by spyware programs. System
software, that is, software which has a legitimatemonitors record various actions on computer systems.
purpose but contains harmful bugs.Keyloggers record users’ keystrokes in order to
3. Trojan Horse or Trojanmonitor user behaviour. Self-replicating malware
In the context of computing and software, adownloads and spreads disorder in systems and
‘Trojan horse’, or simply ‘Trojan’, is anetworks. Data-harvesting software programmed to
piece of software which appears to perform a certaingather e-mail addresses have become conventional
action but in fact performs another such as afeatures of the Internet, which among other things
computer virus. Contrary to popular belief, this action,results in that spam e-mail messages fill networks and
usually encoded in a hidden payload, may or may notcomputers with unsolicited commercial content. With
be actually malicious, but Trojan horses are notoriousthose threats in mind, we hereby define
today for their use in the installation of backdoorprivacy-invasive software as a category of software
programs. Simply put, a Trojan horse is not necessarilythat ignores users’ right to be let alone and that is
a computer virus. Unlike such malware, it does notdistributed with a specific intent, often of a commercial
propagate by self-replication but relies heavily on thenature, which negatively affect[s] its users.
exploitation of an end-user. Therefore, a computerIn this context, ignoring users’ right to be let alone
worm or virus may be a Trojan horse. The term ismeans that the software is unsolicited and that it does
derived from the classical story of the Trojan Horse.not permit users to determine for themselves when,
4. Computer Wormshow and to what extent personally identifiable data is
A ’computer worm’ is a self-replicatinggathered, stored or processed by the software.
computer program. It uses a network to send copiesDistributed means that it has entered the computer
of itself to other nodes (computer terminals on thesystems of users from (often unknown) servers
network) and it may do so without any userplaced on the Internet infrastructure. Often of a
intervention. Unlike a virus, it does not need to attachcommercial nature means that the software
itself to an existing program. Worms almost always(regardless of type or quality) is used as a tool in
cause harm to the network, if only by consumingsome sort of a commercial plan to gain revenues.
bandwidth, whereas viruses almost always corrupt or7. Adware
modify files on a targeted computer.‘Adware’ or advertising-supported software is
5. Computer Virusany software package which automatically plays,
A computer virus is a computer program that candisplays, or downloads advertising material to a
copy itself and infect a computer without permission orcomputer after the software is installed on it or while
knowledge of the user. The term "virus" is alsothe application is being used. Some types of adware
commonly used, albeit erroneously, to refer to manyare also spyware and can be classified as
different types of malware and adware programs.privacy-invasive software.
The original virus may modify the copies, or the copiesAdware is software with advertising functions
may modify themselves, as occurs in a metamorphicintegrated into or bundled with a program. It is usually
virus. A virus can only spread from one computer toseen by the developer as a way to recover
another when its host is taken to the uninfecteddevelopment costs, and in some cases it may allow
computer, for instance by a user sending it over athe program to be provided to the user free of charge
network or the Internet, or by carrying it on aor at a reduced price. The advertising income may
removable medium such as a floppy disk, CD, or USBallow or motivate the developer to continue to develop,
drive. Viruses can also spread to other computers bymaintain and upgrade the software product.
infecting files on a network file system or a file systemSome adware is also shareware, and so the word
that is accessed by another computer.may be used as term of distinction to differentiate
Viruses are sometimes confused with computerbetween types of shareware software. What
worms and Trojan horses. A worm can spread itselfdifferentiates adware from other shareware is that it
to other computers without needing to be transferredis primarily advertising-supported. Users may also be
as part of a host, and a Trojan horse is a file thatgiven the option to pay for a "registered" or "licensed"
appears harmless. Worms and Trojans may causecopy to do away with the advertisements. Adware
harm to a computer system's hosted data, functionalcan also download and install PUPs to your computer.
performance, or networking throughput, when8. Rootkit
executed. In general, a worm does not actually harmA ’rootkit’ is a program (or combination of
either the system's hardware or software, while atseveral programs) designed to take fundamental
least in theory a Trojan's payload may be capable ofcontrol (in Unix terms "root" access, in Windows terms
almost any type of harm if executed. Some can't be"Administrator" (access) of a computer system,
seen when the program is not running, but as soon aswithout authorization by the system's owners and
the infected code is run, the virus kicks in. That is whylegitimate managers. Access to the hardware (i.e, the
it is so hard for people to find viruses themselves andreset switch) is rarely required as a rootkit is intended
why they have to use spyware programs and registryto seize control of the operating system running on the
processors.hardware. Typically, rootkits act to obscure their
Most personal computers are now connected to thepresence on the system through subversion or
Internet and to local area networks, facilitating theevasion of standard operating system security
spread of malicious code. Today's viruses may alsomechanisms. Often, they are also Trojans as well, thus
take advantage of network services such as thefooling users into believing they are safe to run on their
World Wide Web, e-mail, Instant Messaging and filesystems. Techniques used to accomplish this can
sharing systems to spread, blurring the line betweeninclude concealing running processes from monitoring
viruses and worms. Furthermore, some sources useprograms, or hiding files or system data from the
an alternative terminology in which a virus is any formoperating system.
of self-replicating malware.Rootkits may have originated as regular, though
Some viruses are programmed to damage theemergency, applications, intended to take control of an
computer by damaging programs, deleting files, orunresponsive system, but in recent years have been
reformatting the hard disk. Others are not designed tolargely malware to help intruders gain access to
do any damage, but simply replicate themselves andsystems while avoiding detection. Rootkits exist for a
perhaps make their presence known by presentingvariety of operating systems, such as Microsoft
text, video, or audio messages. Even these benignWindows, Mac OS X[2] [3] , Linux and Solaris. Rootkits
viruses can create problems for the computer user.often modify parts of the operating system or install
They typically take up computer memory used bythemselves as drivers or kernel modules, depending on
legitimate programs. As a result, they often causethe internal details of an operating system's
erratic behaviour and can result in system crashes. Inmechanisms.
addition, many viruses are bug-ridden, and these bugs9. Conclusion
may lead to system crashes and data loss. Many CIDIn this article the terms malware, Trojans or Trojan
programs are programs that have been downloadedHorses, Worms, Computer Virus, Spyware, Adware
by the user and pop up every so often. This results inand Rootkits were defined. It is hoped that a better
slowing down of the computer, but it is also veryunderstanding of these terms will result in people
difficult to find and stop the problem.becoming more aware of the dangers they are
6. Spywareexposed to every day and that they will install the
‘Spyware’ is computer software that is installedappropriate software to protect themselves from the
surreptitiously on a personal computer to intercept ordamage that can be done.