CalgaryPCmedic.com

What is a virus?

A computer virus is a program, a piece of executable code, that has the unique ability to replicate. Like biological viruses, computer viruses can spread quickly and are often difficult to eradicate. They can attach themselves to just about any type of executable file and are spread as files that are copied and sent from individual to individual.

In addition to replication, some computer viruses share another commonality: a damage routine that delivers the virus payload. While payloads may only display messages or images, they can also destroy files, reformat your hard drive, or cause other damage. If the virus does not contain a damage routine, it can cause trouble by consuming storage space and memory, and degrading the overall performance of your computer.

What is a Trojan?

A Trojan is a malware that performs a malicious action, but has no replication abilities. Coined from Greek mythology's Trojan horse, a Trojan may arrive as a seemingly harmless file or application, but actually has some hidden malicious intent within its code. Trojan malware usually have a payload. When a Trojan is executed, you may experience unwanted system problems in operation, and sometimes loss of valuable data.

What is a worm?

A computer worm is a self-contained program (or set of programs) that is able to spread functional copies of itself or its segments to other computer systems. The propagation usually takes place via network connections or email attachments.More recent worms have also discovered ways to propagate using Instant Messengers, via file sharing applications, and by collaborating with other malware such as Trojans or other worm variants. WORM_BAGLE.BE, for example, forms a vicious worm-Trojan cycle with TROJ_BAGLE.BE, in which the worm mass-mails copies of the Trojan, and the Trojan downloads copies of the worm. Additionally, the FATSO family is a family of worms that propagate via an instant messaging application and a popular peer-to-peer file sharing application.Some worms may have an additional payload, such as preventing a user from accessing antivirus Web sites, or stealing the licenses of installed games and applications.

What is Malware?

A malware is a program that performs unexpected or unauthorized, but always malicious, actions. It is a general term used to refer to viruses, Trojans, and worms. Malware, depending on their type, may or may not include replicating and non-replicating malicious code. Due to the many facets of malicious code or a malicious program, referring to it as malware helps to avoid confusion. For example, a virus that also has Trojan-like capabilities may be called malware.

Life Cycle of a Malware

The life cycle of a malware begins when it is created and ends when it is completely eradicated. The following outline describes each stage:

What is Adware?

An adware is a program or a small applet (small application) that installs itself unauthorized by you in your computer and displays an advertisement or several ads on behave of it's creator. Most adware even though very annoying, are not dangerous on their own, if you don't get rid of them however they tent to accumulate and over time they will slow down your computer considerably. It is estimated that the average user has anywhere from 10 to 200 adware in his computer unknown by him. Some adware are very easy to remove, while others are very difficult and extremely intrusive, some go as far as changing the look and feel of applications like internet explorer installing a banner with their advertisement and/or a launch bar actually changing the code of the program itself. talk about invasion of privacy.

What is Spyware?

Spyware as it's name implies is simply a small utility or program to "spy" on you. Why would anyone want to spy on you? In most cases to try and sell you something. Here is how it works. You are browsing the internet unsuspecting, while you look for whatever your fancy, internet marketing agencies are looking for you! Why..you may ask? To see what you like, so that they can target-advertise you accordingly. They upload small utilities in your machine while silently and inconspicuously installs itself within your machine. Over time, this small utility "sees" keeps track of your browsing habits, it records all the different web sites you visit and it uploads that information to it's creator. Let's say that you check your horoscope every 2 or 3 days or so. The spyware program is aware of that, it tells it's creator that you like horoscopes, then it's creator will send ads your way (see adware) which people who read horoscopes may like. Suppose that you visit dieting websites on a regular basis, chances are, they assume, that you want to lose weight, then, you guessed it, they will send adware your way which advertises weight loss programs and such. Are spyware dangerous/ Like adware, no for the most part, but once they start accumulating your machine can slow down to a crawl until it become almost unusable. Even more important, once you become a target, other malicious advertisers and spyware programmers will exchange and/or sell your internet gateway address (anybody who goes online has one) to each other and will target your machine more and more often.

What is a Coockie?

This is not a type of cookie you want to eat. Cookies in computing language, are small files stored on your PC that allow web sites to save various pieces of information to your PC. Typically, a legitimate web site will use cookies to save such things as shopping cart contents, site display preferences, and other bits of information to personalize your browsing experience. However, many marketing companies use cookies to track what web sites you visit for purposes of marketing research. However, these tracking cookies, as they are often called, cannot allow anyone to view files, passwords or other types of sensitive information on your computer.

What is a BHO?

Browser Helper Objects are tiny programs designed to enhance or customize Internet Explorer. Spyware developers will often write BHOs that collect Internet-related information, like web site usernames and passwords (like online Banking sites, etc), what web sites you visit, and how often you are online. BHO programs only run when Internet Explorer is running.

What is a Process? Generally speaking, a process is simply a running program. From a spyware perspective, however, a process is a small program that runs in secret, without the user's consent or knowledge. Like BHOs and cookies, these processes collect personal information. However, such processes are typically not limited to online information. In other words, a spyware process can often collect personal information from anywhere on your computer.

Creation

Until recently, creating a malware required knowledge of a computer programming language. Today anyone with basic programming knowledge, and Internet access, can create a malware. Whole Web sites exist whose only intent is to spread malicious code, and to encourage individuals to develop their own harmful version of already existing, and tried-and-tested malicious programs.

Replication and Propagation

Malware propagate in a number of ways. Worms may spread via email, instant messengers, or network shares. Viruses replicate within a system, while some viruses also have automatic propagation techniques similar to worms. Trojans. while not having any automatic form of replication and propagation, are nevertheless available all over the Internet, and the links to download them from may be included in email messages, or other Web sites.

Activation

Most malware perform their malicious activities upon execution. Some have certain payloads that are activated only at a certain trigger date, or with the onset of a specific trigger condition.

Discovery

This phase does not always follow activation, but typically does. When a malware is detected and isolated, it is sent to the ICSA in Washington, D.C., to be documented and distributed to antivirus software developers. However, with the rapid development of technology, and the ease by which malware authors create their programs, most malware are released to unsuspecting users even before they are discovered by the "authorities".

Assimilation

At this point, antivirus software developers modify their software so that it can detect the new malware. This can take anywhere from one day to six months, depending on the developer and the malware type.

Eradication

Specialized programs need to be used to eradicate malware. Be careful when using such disinfection programs as you may end up deleting files you need along with the bad ones. Keep reading for advice on minimizing these treats.

What can I do?!

Spyware is a major problem in today's computing world. It affects business and residential users alike. It seems as though everyone has either dealt with it, or is highly concerned about it. Not all is lost however, there is a number of steps you can take to minimize exposure to malware in general.

Although the perfect spyware solution is far from perfect, spyware management boils down to three simple things: detection, removal and prevention.

Detection and removal can be performed via a spyware scanner program, be warned however that some of there spyware and adware files install themselves so deep inside your "good" programs that they actually became "part" of them. You have to know what files you can safely remove and what files are essential to your machine, if you are not sure, you are best not to take a chance, even though it may cost a little, you are better to call a pro before you may have to re-install everything and worse yet you lose valuable information and data. There are many malware scanners to choose from, here are several commercial scanners for Microsoft Windows (in no particular order):

Webroot Spy Sweeper ($69.99)

Allume Internet Cleanup ($79.99)

Aluria Spyware Eliminator ($89.99)

McAfee AntiSpyware ($99.99)

Norton Antivirus (recent) ($159.99)

Sunbelt Counterspy ($69.99)

WinPatrol ($89.99)

According to PCWorld's Spyware Stopper comparison, no single scanner discovered all the spyware. In fact, even with a combination of several scanners on the same PC, much of the spyware went undetected.

Although fighting spyware may seem like an impossible task, there are many things you can do to prevent, or at-least minimize your exposure to spyware and adware:

1) Make sure your PC is patched by installing all Windows and Internet Explorer updates via Windows Update.

2) Install browser-addons or other pieces of software only from trusted sources

3) Avoid installing software like Kazaa, Morpheus, Grokster, E-Donkey and other commercial file-sharing applications, which often secretly bundle spyware and adware with their software

4) DO NOT! I Repeat do not, open any e-mails from sources you do not know and/or trust.

Combating spy-ware, ad-ware and mal-ware in general isn't necessarily an easy task. Many may prefer to call a local computer expert to help them purge the mal-ware from their PC. Once the computer is clean, some preventative maintenance will go a long way toward keeping it clean.

If you prefer a professional, safe and effective virus and any mal-ware removal give us a call. We will provide an on-site assessment of your specific problem and advise you on possible solutions.

What can I do?!

Call us at 403-861-6575 today to setup an appointment.