Malware

Question 1

what is a virus?

Answer 1

malicious code that runs on a machine without the users knowledge and infects the computer when executed. Viruses require user action in order to reproduce and spread.

Question 2

what is a boot sector virus?

Answer 2

virus that is stored in the first sector of a hardrive and is loaded into memory on boot.

Question 3

what is a Macro virus?

Answer 3

virus embedded into a document and is executed when the document is opened by the user.

Question 4

what is a program virus?

Answer 4

seeks out executables or application files to infect.

Question 5

what is multipartie virus?

Answer 5

combines boot and program viruses to first attach itself to the boot sector and system files before attacking other files on the computer.

Question 6

what is encryption with a virus?

Answer 6

uses a cipher to encrypt its contents to avoid detection by any antivirus software.

Question 7

what is a polymorphic virus?

Answer 7

changes its code each time its executed by altering the decryption module to evade detection.

Question 8

what is a metamorphic virus?

Answer 8

has the ability to rewrite itself entirely before attempting to infect a file.

Question 9

what is an armored virus?

Answer 9

has a layer of protection to confuse a program or a person whos trying to analyze it

Question 10

what is a worm?

Answer 10

malicious software that can replicate itself without any user interaction.

Question 11

what is a trojan?

Answer 11

a piece of malicious software that is disguised as a piece of harmless software.

Question 12

what is a remote access trojan?

Answer 12

provides the attacker with remote control of a victim computer.

Question 13

what is a rootkit?

Answer 13

software designed to gain administrative level control over a system without detection.

Question 14

what is DLL injection?

Answer 14

commonly used by rootkits to maintain their persistent control. malicious code is inserted into a running process on a windows machine.

Question 15

what is driver manipulation?

Answer 15

an attack that relies on compromising the kernal-mode device drivers that operate at a privileged or system level.

Question 16

whats a Shim?

Answer 16

a piece of software code that is placed between two components to intercept calls and redirect them.

Question 17

what is a botnet?

Answer 17

a collection of compromised computers under the control of a master node.

Question 18

what are some symptoms of malware?

Answer 18

recurrent BSOD, hardrives files and applications are not accesible anymore, strange noises, unusual error messages, display looks strange, jumbled print outs

Question 19

what is another way that malware tries to hide in your system?

Answer 19

by using double file extensions.

Question 20

what is another symptom of malware infection?

Answer 20

that your anti virus/malware system wont run

Question 21

what is the first thing you should do if you suspect malware is on your computer?

Answer 21

run a scan

Question 22

what is the first step of removing malware?

Answer 22

identify the symptoms of a malware infection.

Question 23

what is the second step of removing malware?

Answer 23

quarantine the infected systems

Question 24

what is the third step of removing malware?

Answer 24

disable system restore.

Question 25

what is the fourth step of removing malware?

Answer 25

remediate the infected system

Question 26

what is the fifth step of removing malware?

Answer 26

schedule automatic updates and scans.

Question 27

what is the 6th step in removing malware?

Answer 27

enable system restore and create a new restore point.

Question 28

what is the 7th step in removing malware?

Answer 28

provide end user security awareness training

Question 29

what do you do if a boot sector virus is suspected?

Answer 29

reboot the computer from an external device and scan it.

Question 30

what is another hard drive related way that you can remove malware?

Answer 30

remove the hardrive from the infected machine, connect to a clean workstation as a secondary drive and then scan it.

Question 31

what is best detected using anti malware solutions?

Answer 31

worms, trojans and ransomware