From: "Plato" <|@|.|>
| David H. Lipman wrote:
>> | What role do registry keys play in malware? Is a registry key sufficient or
>> | does there need to be a malware program on my computer?
>> Questions like this SHOULD be asked in an anti malware news group such as;
>> microsoft.public.security.virus
| Malware is not a virus. Since you are new to PC use here is the defn. of
| a virus...
|
http://www.bootdisk.com/txtfiles/virus.txt
I don't understand this line...
"#4 is necessary to distinguish between viruses and worms, which do not require a host."
A worm is a virus that self replicates through network protocols such as NNTP, SMTP,
NetBIOS over IP, RPC, etc. and does require a host. The host is used to generate the
network activity to spread. For example a RBot may use TCP port 135 to send out packets
to another PC's TCP port 135 to exploit a vulnerability in RPC, RPCSS/DCOM and if so
infect that PC and if successful, the infected that PC to will also generate packets
attempting to explot other PCs who have this vulnerability.
I will also state that you contradicted youself in the reply of the post...
"Re: win32/adware.virtumonde and win32.privacyremover.m64"
Message:
"System restore does not get rid of viruses. Best bet in the future is
NOT to install the virus in the first place."
The person was NOT infected with a virus. The person was infected with a Zlob/FakeAlert
type Trojan.
I will state that a virus news group is the *best* place to discuss malware.
It was early this AM when I , in a haze of Morning, should have replied...
"I certainly am not "new to PC", that's for sure!"
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV -
http://www.pctipp.ch/downloads/dl/35905.asp