Viruses And Worms - Again!

[Beno]

Hey Gang,

Just been thinking about viruses and worms. I know that a virus is a piece of malicious self replicating code that attaches itself to files or programs and is spread by human interaction, i.e -> people swapping floppies, downloading dangerous files of the web and so on.

However a Worm is not like a virus in the sense that it doesn't require human interaction to spread. It however uses automatic Op.Sys functions to spread itself through the networks that connect up the Internet.

What I don't understand is when sources (in particular www.webopedia.com) (http://www.webopedia.com)) say that for a Worm to spread, the malicious code is not attached to anything?!?!

So how is it spread if by definition it is a virus that doesn't spread by the use of attachments?? You can't send a virus through plain text can you?? or can you??

If someone can tell me how Worm writers send their code without attaching their viruses to anything, I would be enthralled to know about it!!

Take Care

Beno

------------------
Have a nice day

[Ghost_Hacker]

Worms scan for computers with certain security holes. Once they find them they'll exploit the hole to have the computer upload a copy of themselves into the computer.( using FTP or TFTP for instance)Then they set the computer up to run the uploaded code and the process starts again. A worm's weakness is that it must find computers that haven't been patched againest whatever security hole it's trying to exploit.

Viruses on the other hand don't go around "uploading" themselves into other computers. They attach themselves to another file or an email and wait for that file to be moved to another computer and executed. A viruses only weakness (besides anti-virus software ) is that someone must excute the virus program in order for it to infect the host and move on.


Go here to find out how the worm "Code red II" works:
http://www.incidents.org/react/code_redII.php

Hope this helps http://www.PCGuide.com/ubb/smile.gif



[This message has been edited by Ghost_Hacker (edited 01-11-2002).]

[Beno]

So correct me if I am wrong, but a worm doesn't attach itself to emails, it just enters your system because it finds a hole there right??

And this is done by a program which executes on the hackers computers to start with.

Why then when a virus that is spread by email, is coined by the media as a Worm, when clearly a worm is not attached to anything. I mean I haven't really heard of a virus that is just plain text - have you??

Anyone that is an expert on Worm should comment on this as my collegeaus and I are somewhat confused!!

Thanks a lot

------------------
Have a nice day

[sea69]

this should be good.

http://www.PCGuide.com/ubb/smile.gif



------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)


;)~

[Beno]

C'mon,

Does anybody out there have an answer, or have I stumped you all!!


------------------
Have a nice day

[Paul Komski]

I'm gettin' déja vu! Does this previous thread Worm Confusion (http://www.pcguide.com/ubb/Forum8/HTML/000535.html) help? If not, then this might run and run. LOL http://www.PCGuide.com/ubb/smile.gif

------------------
Take nice care of yourselves - Paul

PS Sorry Beno I just realised that you started the other thread http://www.PCGuide.com/ubb/eek.gif

[This message has been edited by Paul Komski (edited 01-13-2002).]

[Ghost_Hacker]

Beno

The "media" doesn't have a clue what a virus is or what a worm is. They are just as confused as you are. http://www.PCGuide.com/ubb/biggrin.gif

All code is plain text at one point but an "executable" probram is a binary. However some viruses are "plain text" for example a VBscript virus. ( alot of the "email" viruses going around are written in VBScript which is "plain text" but because of it's VBS extension will be excuted by Windows much like a .bat file)

My first post should have answered your question. Yes, a worm looks for computers with security holes ( worms mostly "hunt" for servers, but can infect any computer that hasen't been patched agianest whatever security hole they're looking for ) and yes a worm starts at what ever computer the hacker see fit to run it from.


Hope your less confused now http://www.PCGuide.com/ubb/biggrin.gif

[This message has been edited by Ghost_Hacker (edited 01-13-2002).]

[Paul Komski]

Just maybe STUFF HERE (http://email.about.com/library/glossary/bldef_worm.htm) might help to make things more understandable. http://www.PCGuide.com/ubb/biggrin.gif

------------------
Take nice care of yourselves - Paul

[Beno]

Look, I know you all think that I don't know the difference but when I find out about Viruses and Worms, it is usually through the media (i.e -> newspaper and tv) but when you go and read the true definition of a virus or worm you start to get confused and THEN i come to this site to get verification.

That explains it

------------------
Have a nice day

[Ghost_Hacker]

Ahhhh....

You want to know how does a virus spread when it dosn't infect another file.

The answer is scripting which is "plain text" and can be excuted. VBScript can use Objects (like Outlook) and thier methods (like create and send an email) to send malicious code without infecting another file. Also HTML ( again it's plain text) can be used to excute malicious code.


The VBscript must be "clicked" on in order to run, but HTML can be "ran" just by viewing it in the preview window of Outlook/Outlook Express.

Here's some information on HTML viruses:
http://ciac.llnl.gov/ciac/bulletins/j-018.shtml


Here's some information on Vbscript viruses (not very detailed):
http://www.antivirus.com/pc-cillin/vinfo/vprimer_virus_type.htm#script




[This message has been edited by Ghost_Hacker (edited 01-13-2002).]

[Beno]

Ghost_Hacker

I must thank you, you have been very helpful to me in all my posts that I put up, and for someone of your knowledge - I am impressed with your tolerance.
I have trouble teaching people stuff that are less knowlegable than me becuase it takes time for them to fully absorb it - - so I am grateful to you and other like Paleo Pete, Sea69, GeeBee, mjc and others

Thanks

Beno

------------------
Have a nice day

[Ghost_Hacker]

No,problem Beno

Sorry, I didn't understand what your question was the first time.
My brain doesn't work right till after I've had breakfast. http://www.PCGuide.com/ubb/biggrin.gif

[Paul Komski]

Nice links Ghost_Hacker.

BTW Macs are not immune from worms either:- PowerMac Worm (http://www.amherst.edu/it/news/archive/pre-2000/virus.autostart.html). But then it is scripting once again.

------------------
Take nice care of yourselves - Paul

PS I have problems getting my brain in gear at any time (before or after breakfast) http://www.PCGuide.com/ubb/biggrin.gif http://www.PCGuide.com/ubb/frown.gif http://www.PCGuide.com/ubb/biggrin.gif

[This message has been edited by Paul Komski (edited 01-13-2002).]