• Home

  • Documents

  • Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector...
11
Malware: Defenses

Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Embed Size (px)

Citation preview

Page 1: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Malware: Defenses

Page 2: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Kinds of malware

Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes Worms

Page 3: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Some avoidance tips

Install an anti-virus program and keep it up to date

McAfee or AVG from http://free.grisoft.com/ Be wary of unexpected links and attachments Don't use P2P/BitTorrent Never turn off your anti-virus or your firewall. Check thumb drives, floppies, burned CDs and DVDs Don't accept files from unknown people when using

Internet Chat programs such as MSN Messenger, IM, Yahoo Messenger, IRC.

http://free.grisoft.com/
Page 4: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Symptoms of a sick System

Frequent crashes and system restarts slow/erratic performance Broken/erratic internet connection An active internet connection in an otherwise

idle computer Stuff in your sent folder you didn't send. Missing or corrupt data/files.

Page 5: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

What to do?

Update your antivirus software. Disconnect from the internet: turn off your

modem/router and wireless. (Quarantine every computer)

If your antivirus found the virus and cleaned it, you are fine, otherwise: Boot into safe mode Do a system virus scan. Repeat until clean.

Page 6: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

If you cannot get on the Internet...

Your virus may have fiddled with a file called HOSTS

Its full name is:

C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS

on most systems (XP and VISTA, probably Windows 7 also). Its contents should only be:

127.0.0.1 localhost

and (in Vista, Windows 7):

::1 localhost There may be some lines with ipv6xx names on them, they are

OK.

Edit the file with Notepad

Page 7: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Operating System Security Features

KEEP YOUR OS UP TO DATE; set it to check for updates periodically (at least once a week).

Install and run antivirus software; keep it up to date (it should update automatically).

Keep your Firewall operational. In Vista and Windows 7, (and in the MAC), every time

some program tries to change the system in some significant fashion, a window prompt appears. Called UAC in Windows, it can be turned off. DON'T

Page 8: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

More System Security Features

Be sure to set up all accounts as STANDARD accounts; have a special Administrator account (hopefully called something else) for admin tasks.

Windows has something called Data Execution Prevention (DEP). To set: In XP: use sysdm.cpl, Advanced, performance, click

on Settings and choose the level. In Vista/Windows 7: system, Advanced System Setting,

Advanced Tab, Settings, DEP settings.

Page 9: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Viruses on Other devices

On the MAC: before OS X there were about 60-80 viruses.; only a handful for OS X. So, not a real problem; however: PC viruses can happily live (dormant) in MAC files. Newer MACs can run Windows, and there, all bets are

off. Unix/Linux have seen a handful of Virus, none for

monetary gain. It is possible, now, to run Windows in Linux, so, again, the Caveat above applies. Also, PC viruses can exist in any file.

Page 10: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

Viruses in Phones/PDAs

Attacks against cell phones: Through SMS messages. The possibility existed. Otherwise

Five kinds of devices:

Symbian

Handful, spread through Bluetooth

RIM (Blackberrys)

None known

Iphones, etc.

None known, unless the phone is “jailbroken”

Windows Mobile Phones

Too new.

Android

Some apps have been malicious, but not been able to spread.

Page 11: Malware: Defenses. Kinds of malware Viruses Macro Viruses Memory-resident viruses File infector viruses Boot Viruses Trojan Horses Hoaxes

If your virus doesn't remove,try:

http://www.sarc.com/avcenter/tools.list.html http://us.mcafee.com/virusinfo/default.asp?id=vrt. http://www.kaspersky.com/removaltools http://www.bitdefender.com/site/Download/browseFree

RemovalTool/ http://www.f-secure.com/download-purchase/tools.sht

ml http://www.microsoft.com/security/malwareremove/

http://www.sarc.com/avcenter/tools.list.html
http://us.mcafee.com/virusinfo/default.asp?id=vrt.
http://www.kaspersky.com/removaltools
http://www.bitdefender.com/site/Download/browseFreeRemovalTool/
http://www.bitdefender.com/site/Download/browseFreeRemovalTool/
http://www.f-secure.com/download-purchase/tools.shtml
http://www.f-secure.com/download-purchase/tools.shtml
http://www.microsoft.com/security/malwareremove/

Using Malware Analysis to Tailor SQUARE for Mobile Platforms · 2 Survey of Mobile Malware 8 2.1 Classes of Mobile Malware 8 2.1.1 Trojans 8 2.1.2 Viruses 8 ... More than 650,000

Using Malware Analysis to Tailor SQUARE for Mobile Platforms · 2 Survey of Mobile Malware 8 2.1 Classes of Mobile Malware 8 2.1.1 Trojans 8 2.1.2 Viruses 8 ... More than 650,000

Documents
Ransomware, Malware and Viruses; How to Protect Yourself

Ransomware, Malware and Viruses; How to Protect Yourself

Documents
CAP6135: Malware and Software Vulnerability Analysis Viruses Cliff Zou Spring 2011

CAP6135: Malware and Software Vulnerability Analysis Viruses Cliff Zou Spring 2011

Documents
Malware (MALicious softWARE) Malware Taxonomycs.wellesley.edu/~cs342/fall14/lectures/22_viruses_and_worms.pdfDepartment of Computer Science Wellesley College Viruses and Worms Thrursday,

Malware (MALicious softWARE) Malware Taxonomycs.wellesley.edu/~cs342/fall14/lectures/22_viruses_and_worms.pdfDepartment of Computer Science Wellesley College Viruses and Worms Thrursday,

Documents
Computer Viruses and Malware · Dept. Computer Science 2500 University Drive N.W. CALGARY AB T2N 1N4 CANADA Library of Congress Control Number: 2006925091 Computer Viruses and Malware

Computer Viruses and Malware · Dept. Computer Science 2500 University Drive N.W. CALGARY AB T2N 1N4 CANADA Library of Congress Control Number: 2006925091 Computer Viruses and Malware

Documents
QH Quarterly Threat Report Q1 - 2020 · million exploits, 0.17 million Adware & Potentially Unwanted Applications (PUA), 45K Cryptojacking malware, 0.25 million Infector and 0.24

QH Quarterly Threat Report Q1 - 2020 · million exploits, 0.17 million Adware & Potentially Unwanted Applications (PUA), 45K Cryptojacking malware, 0.25 million Infector and 0.24

Documents
Chapter 8 Malware - FTMSMalware Types of Malware Viruses • A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. • Viruses

Chapter 8 Malware - FTMSMalware Types of Malware Viruses • A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. • Viruses

Documents
Part I Typical Concerns and Problems What Computer Users Want to Avoid Types of Malware Explained Symptoms of Malware: Viruses, Worms, Trojan

Part I Typical Concerns and Problems What Computer Users Want to Avoid Types of Malware Explained Symptoms of Malware: Viruses, Worms, Trojan

Documents
Malware, Spyware, and Viruses

Malware, Spyware, and Viruses

Documents
auto the ims THIS ISSUE · malware and viruses. Some great tips and reminders from this training include: Most people associate viruses and malware with computers or servers, but

auto the ims THIS ISSUE · malware and viruses. Some great tips and reminders from this training include: Most people associate viruses and malware with computers or servers, but

Documents
Caring for Technology Malware. Malware In this Topic we examine: v Viruses (or Malware) v Virus Detection Techniques v When a Virus is Detected v Updating

Caring for Technology Malware. Malware In this Topic we examine: v Viruses (or Malware) v Virus Detection Techniques v When a Virus is Detected v Updating

Documents
Viruses, Spyware , Malware and Phishing

Viruses, Spyware , Malware and Phishing

Documents
malware: Malicious Code - Uic Computer Sciencesloan/CLASSES/privacy/Malware.pdf · Malicious code: Viruses • Most famous type of malicious code • Malware Program that seeks out

malware: Malicious Code - Uic Computer Sciencesloan/CLASSES/privacy/Malware.pdf · Malicious code: Viruses • Most famous type of malicious code • Malware Program that seeks out

Documents
Viruses. Malware versus Virus Viruses belong to a larger category of software known as Malware, which is short for “malicious software” Computer viruses

Viruses. Malware versus Virus Viruses belong to a larger category of software known as Malware, which is short for “malicious software” Computer viruses

Documents
Malware Incident Handling & Forensics. Malware Types Viruses. A virus self-replicates by inserting copies of itself into host programs or data files

Malware Incident Handling & Forensics. Malware Types Viruses. A virus self-replicates by inserting copies of itself into host programs or data files

Documents
Computer Viruses & Other Malware

Computer Viruses & Other Malware

Documents
Malware Halting · 2017-05-16 · Malware—malicious software used to ... fraction of the computers to halt malware spreading 16. Epidemiological model We model viruses and worms

Malware Halting · 2017-05-16 · Malware—malicious software used to ... fraction of the computers to halt malware spreading 16. Epidemiological model We model viruses and worms

Documents
Malware Variant Detection - Semantic Scholar · Malware programs (e.g., viruses, worms, Trojans, etc.) are a worldwide epidemic. Studies and statistics show that the impact of malware

Malware Variant Detection - Semantic Scholar · Malware programs (e.g., viruses, worms, Trojans, etc.) are a worldwide epidemic. Studies and statistics show that the impact of malware

Documents
Malware 101 Viruses 32848

Malware 101 Viruses 32848

Documents
Fujacks a Modern File Infector

Fujacks a Modern File Infector

Documents
SplitScreen: Enabling Efficient, Distributed Malware Detection · The amount of malicious software (malware)—viruses, worms, Trojan horses, and the like—is exploding. As the amount

SplitScreen: Enabling Efficient, Distributed Malware Detection · The amount of malicious software (malware)—viruses, worms, Trojan horses, and the like—is exploding. As the amount

Documents
10 Types of Malware Found Today -- Not Just Viruses

10 Types of Malware Found Today -- Not Just Viruses

Devices & Hardware
How ESET protects you from today's advanced malware threats€¦ · system that quickly identifies and reports newly discovered viruses and malware, creating an instantaneous view

How ESET protects you from today's advanced malware threats€¦ · system that quickly identifies and reports newly discovered viruses and malware, creating an instantaneous view

Documents
Computer Security Seminar Lecture 2orrd/CompSecSeminar/2013/... · Malware Backdoors Defense Viruses Worms Trojan Rootkits Botnets Computer Viruses One of the eldest malicious threats

Computer Security Seminar Lecture 2orrd/CompSecSeminar/2013/... · Malware Backdoors Defense Viruses Worms Trojan Rootkits Botnets Computer Viruses One of the eldest malicious threats

Documents
VIRUSES and MALWARE

VIRUSES and MALWARE

Documents
Malware: Scanners, Sniffers, Viruses, Worms, Mobile Code

Malware: Scanners, Sniffers, Viruses, Worms, Mobile Code

Documents
Cisco Security Intelligence...Scandinavia on the Rise | 8 of Top 10 Countries in EMEA The Web is an equal-opportunity infector Russia 9.79% 33% of all web malware encounters resulted

Cisco Security Intelligence...Scandinavia on the Rise | 8 of Top 10 Countries in EMEA The Web is an equal-opportunity infector Russia 9.79% 33% of all web malware encounters resulted

Documents
Viruses & Malware

Viruses & Malware

Education
Malware: Viruses, Worms, & Botnetspeople.eecs.berkeley.edu/~dawnsong/teaching/f12-cs... · Malware: Viruses, Worms, & Botnets Computer Security Course. Dawn Song . Reflections on

Malware: Viruses, Worms, & Botnetspeople.eecs.berkeley.edu/~dawnsong/teaching/f12-cs... · Malware: Viruses, Worms, & Botnets Computer Security Course. Dawn Song . Reflections on

Documents
Tips to Avoid PC Viruses and Malware

Tips to Avoid PC Viruses and Malware

Technology