130
2 Computer Viruses, Malicious Logic, and Spyware
Table 2.2 Types of behavior features of Trojan programs
Name of the Trojan program
Purpose and functioning features
Trojan-ArcBomb
Trojan archive bombs
Archives; during unpacking, they expand to such
size that they begin impairing operation of the
computer. As soon as you try to unpack such
archive, the computer can start working slowly or
freeze, or the drive can get filled with “empty”
data. ArcBombs are especially dangerous for file
and mail servers. If a server employs the system
of automatic processing of input information,
such archive bomb can stop the server
Backdoor
Remote administration Trojans
These are considered the most dangerous among
Trojan programs; in terms of functions, they
resemble remote administration programs that can
be freely bought. These programs install
themselves out of sight of the user and help the
intruder control the computer remotely
Trojan
They include the following malware:
• Classic Trojans; they perform only the basic
functions of Trojan programs: blocking,
altering, or destroying information, interrupting
operation of computers or computer networks;
have no additional functions
Trojan programs
Typical of other types of Trojan programs
described in this table;
• Multi-purpose Trojan programs; they have
additional functions attributed to several types
of Trojans at once
Trojan-ransom
Take information on the user’s computer hostage,
altering and blocking it, or interrupt operation of
the
Trojan programs demanding ransom
Computer, preventing the user from using
information. The intruder demands the user to pay
in exchange for the promise to send the program
that will restore operation of the computer and the
data stored
Trojan-clicker
Hit web pages using the user’s PC: they either
send commands to the web browser themselves or
replace the web addresses stored in system files
Trojan clickers
With the help of these programs, intruders
organize network attacks and increase site traffic
to elevate the number of ad banners shown
Trojan-downloader
Hit the intruder’s web page, download other
malware from it, and install it on the user’s
Trojan downloaders
PC; they can store the file name of the
downloaded malware or get it from the addressed
page
(continued)
2 Computer Viruses, Malicious Logic, and Spyware
Table 2.2 Types of behavior features of Trojan programs
Name of the Trojan program
Purpose and functioning features
Trojan-ArcBomb
Trojan archive bombs
Archives; during unpacking, they expand to such
size that they begin impairing operation of the
computer. As soon as you try to unpack such
archive, the computer can start working slowly or
freeze, or the drive can get filled with “empty”
data. ArcBombs are especially dangerous for file
and mail servers. If a server employs the system
of automatic processing of input information,
such archive bomb can stop the server
Backdoor
Remote administration Trojans
These are considered the most dangerous among
Trojan programs; in terms of functions, they
resemble remote administration programs that can
be freely bought. These programs install
themselves out of sight of the user and help the
intruder control the computer remotely
Trojan
They include the following malware:
• Classic Trojans; they perform only the basic
functions of Trojan programs: blocking,
altering, or destroying information, interrupting
operation of computers or computer networks;
have no additional functions
Trojan programs
Typical of other types of Trojan programs
described in this table;
• Multi-purpose Trojan programs; they have
additional functions attributed to several types
of Trojans at once
Trojan-ransom
Take information on the user’s computer hostage,
altering and blocking it, or interrupt operation of
the
Trojan programs demanding ransom
Computer, preventing the user from using
information. The intruder demands the user to pay
in exchange for the promise to send the program
that will restore operation of the computer and the
data stored
Trojan-clicker
Hit web pages using the user’s PC: they either
send commands to the web browser themselves or
replace the web addresses stored in system files
Trojan clickers
With the help of these programs, intruders
organize network attacks and increase site traffic
to elevate the number of ad banners shown
Trojan-downloader
Hit the intruder’s web page, download other
malware from it, and install it on the user’s
Trojan downloaders
PC; they can store the file name of the
downloaded malware or get it from the addressed
page
(continued)