Section 14.7 Malware Protection

Question 1

Virus

Answer 1

Self-replicating malware that attaches in a legitimate program and hides there.

When the program runs, the virus payload is also executed.

Question 2

Boot-sector virus

Answer 2

A virus that injects itself in the boot sector and moves the Master Boot Record to another location on the hard drive. The virus then always executes before the MBR.

Question 3

Trojan horse

Answer 3

Malware that provides a hacker covert remote access to the victim’s system.

Question 4

Spyware

Answer 4

Malware that monitors and logs a user’s activity on the device. This includes web browsing, applications, instant messaging, etc.

Question 5

Ransomware

Answer 5

Malware that scans the system for user files and encrypts them. To regain access to files, the victim must pay a ransom.

Question 6

Cryptominer

Answer 6

Malware that uses the victim computer’s resources to mine for cryptocurrency on behalf of the hacker.

Question 7

Rootkit

Answer 7

Malware that consists of programs that can give the hacker root (administrator) access to the target machine.

Question 8

Malware definitions

Answer 8

A unique fingerprint for each discovered malware. Anti-malware programs keep a database of definitions to detect and remove malware.

Question 9

Sheep-dip computer

Answer 9

A special computer that is setup for malware analysis and remediation.

Question 10

Keylogger

Answer 10

Malware that logs every keystroke the user makes and then sends the report back to the hacker.

Question 11

Windows Pre-Installation Environment (WinPE)

Answer 11

A lightweight version of Windows that boots from the USB drive and is typically used to help deploy Windows in an enterprise environment or for troubleshooting Windows issues.

Question 12

What is malware and how do I keep from getting it?

Answer 12

Malware is harmful software. Avoid it by not clicking on strange links, downloading from trusted sources, and using security software.
Why is a rootkit so dangerous to a PC?

Question 13

Why is a rootkit so dangerous to a PC?

Answer 13

A rootkit hides deep in your computer, making it hard to detect and letting hackers control your PC.
What is the difference between a virus and a Trojan horse?

Question 14

What is the difference between a virus and a Trojan horse?

Answer 14

A virus spreads by attaching to files. A Trojan horse looks safe but does harm when opened.
How can Windows Defender help me with malware?

Question 15

What are some ways you can remove malware from a system?

Answer 15

Use antivirus software, run a scan, delete bad files, or reset the computer to a safe state.

Question 16

How can Windows Defender help me with malware?

Answer 16

Windows Defender scans and removes malware, protecting your PC automatically.