Re: What is the difference between a worm and a trojan ?

From: Alun Jones [MS MVP - Security] (alun_at_texis.invalid)
Date: 05/21/04

  • Next message: Alan Connor: "Re: What is the best affordable protection?"
    Date: Fri, 21 May 2004 16:24:27 GMT
    
    

    In article <40ad74da$1@darkstar>, Big Will
    <SPAMwSPAMiSPAMlSPAMlSPAMbSPAM4SPAMeSPAMvSPAAAAAMeSPAMMITTYrSPAAAAM@nIeDONTt
    LIKEzSPAMero.net> wrote:
    >According to many of the definitions I've read, the malware must not
    >replicate in order for it to be a trojan. Otherwise, worms such as Swen
    >would be considerred trojans.

    All it needs to do is be something other / more than it claims to be. Swen
    claims (to the user) to be a system patch, and is really a virus. Ergo,
    it's a trojan, too.

    Worms don't need to appeal to users, so they don't have to be trojans.

    Viruses generally create their own trojans by co-opting other programs.

    I'm not even sure that I would class Swen as a virus, since it doesn't
    infect other files, and it only runs after the user has installed it.

    Alun.
    ~~~~

    [Please don't email posters, if a Usenet response is appropriate.]

    -- 
    Texas Imperial Software   | Find us at http://www.wftpd.com or email
    1602 Harvest Moon Place   | alun@texis.com.
    Cedar Park TX 78613-1419  | WFTPD, WFTPD Pro are Windows FTP servers.
    Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.
    

  • Next message: Alan Connor: "Re: What is the best affordable protection?"

    Relevant Pages

    • Re: ssl negotiation failed with Microsoft IIS
      ... They can fail when you write first ssl packet header, ... [Please don't email posters, if a Usenet response is appropriate.] ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
      (microsoft.public.platformsdk.security)
    • Re: Security Bug in IE
      ... >people print out the contents of FTP sites, ... [Please don't email posters, if a Usenet response is appropriate.] ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
      (microsoft.public.security)
    • Re: Why does Windows allow Worms?
      ... In article, Bruce Barnett ... [Please don't email posters, if a Usenet response is appropriate.] ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
      (comp.security.misc)
    • Re: LogonUser, but no password?
      ... across a network, for instance a client certificate, or a password, but even ... [Please don't email posters, if a Usenet response is appropriate.] ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
      (microsoft.public.platformsdk.security)
    • Re: Security??
      ... It was silly of Jason to claim that he was invulnerable. ... [Please don't email posters, if a Usenet response is appropriate.] ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
      (microsoft.public.security)

  • Quantcast