Turning the Worm: The What, Where and How (to Remove) of Computer Worms
Removing worms can be particularly annoying and dangerous if not done right. Here's a look at the best worm removal tools.
Unlike computer viruses, which attach to existent programs, worms are stand-alone, self-replicating programs, designed to exploit vulnerabilities in network servers. Generally targeting Windows operating systems, as well as occasionally Linux systems, worms are best repelled and exposed by security patches distributed by vendors such as Microsoft, as well as through removal tools included in commercial antivirus and anti-spyware software. With the chief objective of spreading, worms travels through network connections, trojaned email messages, instant messaging, file share communities and internet traffic scans which target vulnerable computers, and are often associated with mass spamming initiatives, cyber vandalism and information theft through their symbiotic relationship with spyware.
Many worms attempt to install a backdoor in an infected computer that allows its authors to mass mail spam through a botnet of integrated zombie computers, such as prototypical early worm variants like SoBig and MyDoom. Most famous and effective worms utilise Microsoft Windows’ assembly language – w32 or win.32 – to deliver payloads onto infected computers, and many are capable of piggybacking on another worm’s backdoor breach (such as Doomjuice’s exploitation of MyDoom’s successes). Win.32s, including beagle, sality, brontok, MyLife, sapphire and many others, frequently disable Windows’ Update function, which blocks the dissemination of patches from Microsoft, as well as timing out internet connections to antivirus websites, for the same reason. Amongst the most nefarious recent worms is Conflicker, which also targets Windows, using antivirus technology and updates to mutate and change its behaviour.
As worms are typically spread through spam and instant messaging devices, many installations are preventable through personal computing diligence, but once infected, a computer can be cleaned with relative ease by free antivirus, anti-spyware, anti-rootkit and firewall softwares available online and regular updates from Microsoft Windows, which is why worms often attempt to disable those websites and update programs. Symantec (including Norton and PC Tools), Kaspersky, Avast!, McAfee, Microsoft itself and many others offer free downloads that are quite effective against worm threats.
Norton Antivirus 2009 |
Norton Internet Security 2009 |
Norton 360 |