Trojan horse (0)

Eriala: Informaatika
Inglise keel
Referaat
« Trojan horse »
Lektor S.Remmelg
Üliõpilane A.Parts
Rühm RDIR23
Kood 103373

Introduction

Trojan (also - troyamn, troyamnets, troyamnsky horse Troma) - a program used by an attacker to gather information, its destruction or modification of, computer malfunction or use of its resources in the wrong purposes.
According to the principle of distribution and of the Trojans is not a virus because it does not spread by self-reproduction.
This Trojan is run by the user manually or automatically - the program or part of the operating system running on a victim computer (as a module or utility). For this program file (the name, icon of the program) is called the official name of masquerading as another program ( such as the installation of another program), another file type, or just give us attractive to run a name, icon, etc.
Similar malicious and masking functions are also used by viruses, but unlike them , Trojans can not spread by itself. However , the Trojan can be a module of the virus.
Trojans differ among themselves on those activities that they produce on the infected computer.
Backdoor - Trojan remote administration utility
Utility hidden controls allow you to do with the computer all that they laid the author : to take or send files, start and destroy them, display messages, erase , reboot the computer, etc.
Trojan-PSW - stealing passwords
When you start looking for PSW-Trojan sictemnye files stored on a range of confidential information ( usually phone numbers and passwords to access the Internet ) and send it to the specified code in the "Trojan" e-mail address or addresses.
Trojan-Clicker - Internet clickers.
This family of Trojans, whose main function - the organization of unauthorized access to Internet resources.
Trojan- Downloader - Ships other malware
Trojan horses of this class are designed to download and install on the victim machine new versions of malicious programs, install Trojans or advertising systems.
Trojan-Dropper - installers other malware
As a result of using this class of software hackers reach two goals : a secretive installation of Trojans and / or viruses, protection from anti-virus programs, because not all of them are able to test all the components within this type of file.
Trojan- Proxy - Trojan proxy server
This family of Trojans, secretly engaged in anonymous access to various Internet resources. Commonly used for sending spam.
Trojan-Spy - Spyware
These Trojans carry out electronic spying on the user of the infected computer: input from the keyboard information, screen shots, list of active applications and user interaction with them are stored in a file on disk and periodically sent to the attacker
Trojan-Notifier - notification of a successful attack
Trojans are designed for this type of message master "on the infected computer.

Major trends Trojans

In programs related to the class of Trojans, to date , the following main trends:
Significant increase in the number of spyware stealing confidential banking information.New versions of these programs appear dozens per week and are very diverse and operating principles. Some of them are limited to just a collection of all input from the keyboard data and sending them by e-mail to the attacker. The most powerful can give the author full control over an infected machine to send megabytes of data collected on the remote server to receive commands from there for further work .
Pursuit of total control over infected computers. This is reflected in their association in a zombie network , controlled from a single center
Use of infected machines to send spam through them, or launch attacks
Require special consideration such classes of programs as Trojan-Dropper, and Trojan-Downloader. The ultimate goals they are absolutely identical - installation on the computer of another malware, which can be both a worm and a "trojan". Differs only by the principle of their actions . Dropper" may contain already known malware, or vice versa - to install a new version . As "droppers" can not install one, but several malicious programs that differ fundamentally from the behavior and even written by different people.
Both of these classes of malicious programs used to install on computers not just Trojans and various advertising (advware) or pornographic (pornware) programs.
According to the results of anti-virus services in 2008 recorded 23,680,646 attacks on the Russian Internet users , which were successfully repulsed
The most common and active malware in 2008 is a Trojan-Downloader.Win32.Small.aacq
This family of Trojans, secretly engaged in anonymous access to various Internet resources. Commonly used for sending spam
Trojan-Spy – Spyware
These Trojans carry out electronic spying on the user of the infected computer: input from the keyboard information, screen shots, list of active applications and user interaction with them are stored in a file on disk and periodically sent to the attacker
Trojan-Notifier - notification of a successful attack
Trojans are designed for this type of message master "on the infected computer. 
Major trends Trojans 
In programs related to the class of Trojans, to date, the following main trends:
Significant increase in the number of spyware stealing confidential banking information.New versions of these programs appear dozens per week and are very diverse and operating principles. Some of them are limited to just a collection of all input from the keyboard data and sending them by e-mail to the attacker. The most powerful can give the author full control over an infected machine to send megabytes of data collected on the remote server to receive commands from there for further work .
Pursuit of total control over infected computers. This is reflected in their association in a zombie network, controlled from a single center
Use of infected machines to send spam through them, or launch attacks
Require special consideration such classes of programs as Trojan-Dropper, and Trojan-Downloader. The ultimate goals they are absolutely identical - installation on the computer of another malware, which can be both a worm and a "trojan".Differs only by the principle of their actions. "Dropper" may contain already known malware, or vice versa - to install a new version. As "droppers" can not install one, but several malicious programs that differ fundamentally from the behavior and even written by different people.
Both of these classes of malicious programs used to install on computers not just Trojans and various advertising (advware) or pornographic (pornware) programs.
According to the results of anti-virus services in 2008 recorded 23,680,646 attacks on the Russian Internet users, which were successfully repulsed.
The most common and active malware in 2008 is a Trojan-Downloader.Win32.Small.aacq.
Disappeared from the rankings the worm replaces the now AutoRun.eee Worm.Win32.AutoRun.vnq. It is quite natural, since frequent changes of modifications typical for these classes of malicious programs.
Eliminated from the rankings in November, Trojan-Downloader.WMA.Wimad.n back into the game . Thus, in the ranking, we have just three non-standard boot, indicating that the mass distribution of this type of Trojan programs and users' trust multimedia files. Moreover , the scheme of distribution of malicious programs using multimedia downloaders has proved very effective. This is confirmed by the jump in Trojan-Downloader.WMA.GetCodec.r just 10 points up

CONCLUSION

Malicious attacks are becoming bigger and more refined. And the players contribute to the growth of the black market of virtual property, than on making money by hackers and virus writers
"Trojan horse" is the most dangerous of all malicious programs, because:
First , the crisis makes Internet users more nervous to respond to any events associated with payment systems, online banking, electronic money. At a time when banks go bankrupt, change ownership or are experiencing problems with payments, there are many opportunities to attack customers.
Second, given that modern malware programs require more resources for their development , dissemination and use, for a variety of intruders to the forefront more simple , cheap and crude methods of attack. Trojans can be for cybercriminals one of the most attractive solution .
In order to cope with cybercrime, it is necessary to develop and implement protective strategies . In fact , software to combat malicious programs and strategies for risk management are important at all levels.
In my opinion, in addition to appropriate protection strategies successful fight against cybercrime requires joint efforts. Must act in Internet-Interpol should be continuing education, such as that conducted on the need to use seat belts in the car. There must be rules that will be required in finding the internet. The same rules should support the actions of law enforcement. As in the case of seat belts requires prolonged and persistent educational work in order to realize the need for users of such measures