Re: what is this file C:\windows\Dzexaluxoc.dll

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: "SPAMCOP User" <spamcop_user@xxxxxxxxxxxx>

| Alister,

| Technically they aren't malware

| Malware are malicions programs that disable antivirus etc. Trojans download
| or open backdoors. Worms eat files & attach themselves to them

| --
| SPAMCOP User

I'm sorry...
You are incorrect.

Malware is the high level name for all malicious software (aka; malicious code) such as
trojans, viruses, worms, exploitation code, etc. A malicious javascript is malware. A
malicious .CLASS file in or outside a Java Jar is malware. A malicious HTML file using a
form of IFrame is malware. The Conficker worm is malware. the Lovsa/Blaster worm is
malware. A macro in a MS Word document that causes all subsequent Word documents to
contain that macro is malware (macro virus).

Viruses are self replicating malware. They can be file infectors that insert, append or
prepend code to executables and spread through this action.
Other viruses may self replicate through the use of network protocols. These are Internet
worms. For example one that uses email via SMTP or one that uses NNTP. Many may use TCP
over IP or SMB protocols to spread as well. Other worms may spread via the use of the
AutoRun/AutoPlay features of the OS. They are AutoRun worms. Other viruses may use the
boot sector to spread with examples such as the "NYB" and "Form". many viruses can be
complex and use a variety of ways to to spread. The Conficker worm uses TCP/IP in a
vulnerability/exploitation vector as well as the AutoRun/AutoPlay capability.

Trojans and viruses can have the SAME payload. The difference is a trojan does NOT self
replicate. That is they need assistance to spread such as Social Engineering (the Human
Exploit) or the software vulnerability/explotation vector. Trojans can also "trojanize"
another file. That is a given trojan may insert, append or prepend code to a legitimate
file to make that legitimate file act maliciously. However once that file has been
trojanized it can infect or trojanize another file and that why it is not a virus.

If you had a piece of malware that opens a TCP port for remote access then you may call
that a remote access trojan (RAT). If that same piece of malware also had the ability to
infect another PC, spread, via TCP port 445 then it would be an internet worm (virus) that
had remote access capability.

Now when you say "...malicions programs that disable antivirus etc...". That is true.
That is a type of payload and is symptomatic of an infection. A trojan RootKit may do
this likewise a virus may do this as well. This would be an an example of malware's
tendencey for self preservation. The longer it exists on the infected/affected PC the
longer it may perform its function or payload. For example making your PC act as a zombie
spammer or making your PC act as a proxy server.

When you said "...Trojans download or open backdoors". That is also true but viruses can
and will do this as well.

When you stated "Worms eat files & attach themselves..." that is false. Worms self
replicate, spread, by worming their way through the use of network protocols such as in
TCP/IP or high level functionalities such as AutoPlay/AutoRun.

An example of an AutoRun worm would be something like the SillyFDC which will infect
removable read/write media. Insert a thumb drive in a PC infected with the SillyFDC and
it will install itself onto the thumbdrive. Remove said thumbdrive and insert it on
another PC and via the AutoPlay/AutoRun capability of the OS that PC will too become
infected.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.

Relevant Pages

  • Re: Thursday Trump
    ... They have to deal with over 200,000 wild malware ... (virus, trojans and worms) ...
    (comp.sys.mac.misc)
  • Re: What is the difference between a worm and a trojan ?
    ... >> Because a worm and a virus replicates, ... > justify allowing overlap between trojans and viruses and worms... ... >> Then howabout dynamic malware v. stagnet malware. ...
    (comp.security.misc)
  • Re: IE Browser redirection
    ... Please follow these steps in order to clean your computer of Malware which can include Viruses, Trojans, Worms, Spyware, Hijackers and Dialers. ...
    (alt.computer.security)
  • Re: what is this file C:windowsDzexaluxoc.dll
    ... Malware are malicions programs that disable antivirus etc. Trojans download or open backdoors. ... Malware includes viruses, worms, Trojan horses, and malicious active content arriving through email or Web pages visited. ...
    (microsoft.public.windowsxp.general)
  • Re: So much for Norton...
    ... it will not detect malware. ... certainly detects many types of malware--viruses, worms, trojans, etc. ... "non-viral malware" is normally used to refer to things like spyware ...
    (microsoft.public.windowsxp.help_and_support)