Can Malware damage to the files existing on the host?

[Franky]

Hello guys,

I'm somewhat aware of Malware and their actions. And also know how to get rid of them and clean the machine.

And about the Malware, we all know that Malware can spread in the form of a Worm or a Virus. Viruses are Malware that require some form of user interaction to infect the user's device. On the other hand, Worms are Malware that can enter a device without any explicit user interaction.

OK, my question:
Can Malware damage to our files? For example consider I have various kinds of files, from a simple .MP3 file until .iso, .xlsx, .exe or programming files and etc.
Can those Malware damage those files so that they aren't usable or repairable?

 

[LMiller7]

Can Malware damage to our files? For example consider I have various kinds of files, from a simple .MP3 file until .iso, .xlsx, .exe or programming files and etc.
Can those Malware damage those files so that they aren't usable or repairable?

It certainly can. For that reason, among others, you always need at least one backup copy of important files.

 

[UsernameIssues]

The last major malware that I cleaned up after deleted every file that a user would normally open: It put itself in place of those deleted files.

.doc, .xls, .ppt, .txt, jpg, pdf... files were all gone.
The files had to be restored from my backups for that user.

Here is a PDF that you can skim thru for more info about what the various names of bad files mean. However (as pointed out in that PDF) people do not agree on the definitions for what a virus is or what it does.

 

[Layback Bear]

I will put in a simple way.
The infection what ever it is called can do anything it is coded to do if it can find access.

 

[LMiller7]

Modern malware is very sophisticated. It has to be if it is to remain hidden from sophisticated software specifically designed to locate malware. Some malware has a form of automatic update to update itself when the author releases a newer version. To maintain and hide it's presence malware needs the ability to modify system files, and it must do so in such a way they are still able to function. That is hard. Very hard.

Once you are able to do that, everything else is easy. What malware can do is limited only by the knowledge, skill, and imagination of it's authors. And the mere fact of it's existence shows that the authors have all of these things to a very high degree. The location and destruction of user files is child's play in comparison.

Not all malware destroys user files but this is by choice, not a lack of ability. Malware can be use for a wide variety of purposes that require it to keep a low profile. Destructive behavior would be counter productive to it's purposes. In some cases if the computer owner was aware of the malware and what it was doing they might wish it was destructive. In that way they would at least be aware of it's presence and could so something about it.

Some malware continues it's work for years without ever being detected. In many cases it finally ceases to function only when the computer is taken out of service.

 

[Franky]

@Layback Bear: Thank you for your answer. It was brief and useful which indicates the essence of the topic.

@UsernameIssues: Thanks to you also. your answer is fine and it indicated the facts which were done. But the PDF file is not easily readable (because of the line, color, font, ..) but I completely appreciate you for helping me mate.

@LMiller7: Your explanations are Excellent. Very good. Thank you.
Could you please say how you try to keep your machine (say, a Windows 7 one) safe. I want to do what you are doing!

 

[Layback Bear]

You have done the first stage; learning and asking questions.

Keeping everything updated is also important. I keep my security programs updated several times a day manually. Some choose automatic updates.
Keeping yourself Updated also helps.
Reading the Security Section News on this Forum can be very helpful.

I don't use and never have any P2P or Torrents. It's one of the best ways to get infected.
Being very careful of add-ons when downloading a program that you have chose to try.
Also checking for other programs updates often.
I use FileHippo Updater for that.

FileHippo.com - Download Free Software

Keeping away from anything from IObit.
Keeping away from any tuneup, speedup ect. programs until you ask here first. On the whole Windows 7 doesn't want or need tuned up by any programs. Some times such programs will cause more damage than a infection.

I do scans often even when things seem normal. Some infections hide very well and try to do their nasty things without upsetting the owner/operator.
Many so called security programs found on line are actually programs to infect your computer.
Please ask here first.

What security programs is always a highly discussed subject. Their is no one program that does it all 100% of the time or we would all be using it.
A multi layered protection method I believe is best.
This is what I use on my systems actively.

Micorsoft Security Essentials.
Malwarebytes Anti Malware Pro
Built in Windows 7 Firewall
I use on demand Super Anti Spyware
At times I also like to use Eset free Online Scanner.
Keep in mind that security programs not only has a job of protection it must work well with Windows 7 or you will have loads of problems.

Again Reading through our section on Security you will learn a lot more.

To sum it up simply.

Keep yourself informed and be thoughtful when using your computer.

 

[Franky]

This is what I use on my systems actively.

Micorsoft Security Essentials.
Malwarebytes Anti Malware Pro
Built in Windows 7 Firewall
I use on demand Super Anti Spyware
At times I also like to use Eset free Online Scanner.

Thank you for your explanations.
One question, do you use more that one Anti-malware on your system at the same time!?

 

[DavidE]

I'll add a couple of programs I use to Layback Bear's list.

WinPatrol checks for system changes.
I don't recommend or install this for people I help as it does have more Popup messages that would confuse some folks.
I like it because I want to know when these changes are made.
If you use it, you have to pay attention to the messages and make a decision ...

What Does WinPatrol Do?
The popularity of WinPatrol is based on its ability to detect and prevent changes to important Windows settings. You’ll be notified if unwanted programs are set to automatically run, if a toolbar has been added to Internet Explorer, if your home page, search provider or other internal configurations change. When a new Service or ActiveX component is detected it may be part of a legitimate program. WinPatrol will make sure and if it isn’t, you can tell WinPatrol to disable it.
Just adding a program won’t cause a notification but when a program is configured to run without your knowledge, WinPatrol will let you confirm the change is expected.

Source: WinPatrol- Your Money Back if you're not Happy

There is a free version.

Secunia PSI
There is some overlap in this and what FileHippo reports, but PSI does not really check for Program Updates.
It checks for missing security patches and end of life programs.
I use both Secunia PSI and FileHippo UpdateChecker.
I prefer PSI 2.0, not the latest version (PSI 3.0).
PSI 2.0 is available here - on the right side of the page as an older version:
https://secunia.com/products/consumer/PSI/sys_req/

For Anti-Malware I use MalwareBytes Premium (Paid/real-time) on all my systems in addition to a real-time Anti-Virus program.

 

[Franky]

Thank you for the suggestions.
About your last line: you use MalwareBytes AV with another AV (say, eset, KIS) simultaneously on a system?

 

[DavidE]

Malwarebytes is NOT an AV (Anti-Virus), it is an AM (Anti-Malware)
It is designed to run along side a real-time AV program.

I use it now on systems with ONE real-time Anti-Virus of:
Avast, or Avira, or MS Security Essentials, or Win 8 Windows Defender ...

No problems here.

 

[Franky]

!! Disagree.
Anyway, thank you very much.
I appreciate your comments. And I know I'm not at that level to say you (for example) your opinion (about something) is or isn't correct. I'm novice IMO.

 

[DavidE]

What do you disagree with ?
If I'm wrong, I would like to correct what I said and not spread false or incorrect info.
Thanks

 

[Franky]

OK mate,

With respect to you;

First there are only two types of Malware which are Viruses and Worms. My source for that saying is the book (Computer Networking: A Top-Down Approach, 6/e), page 56.

And also there isn't any AV or AM separately. They all (in effect) seek malicious software and destroy them whatever they are, worm or virus. So in fact all the AV or AM are just like them from that point of view.

And since they all, do work against those bad things, so utilize more than one can cause problem. There are many sources which say run only one Av/M on a machine.

Thanks again.

 

[Layback Bear]

Kurdman please play nice. As per my post #7

What security programs is always a highly discussed subject.

Secunia PSI is a well respected program and I will add it to my list of programs to try.

To answer your question.
I do not run active more than one Anti Malware on my computer at one time. I have never tried.
I use Malwarebytes Pro. As far as I'm concerned it doesn't get any better.

1. Anti Virus programs and Anti Malware programs are not the same. At times they will over lap what they do block or find.

2. You do not want to have two anti virus programs at the same time on the same computer. At times they can see each other as a infection and cause nothing but problems and less security for your computer.

3. I know of no anti virus program that will not run side by side with Malwarebytes.
If you do find a A/V that won't run with Malwarebytes I recommend not using that A/V.

To keep things clear.
Active = Is a program that start at boot and stay running until you shut down your computer.

On demand = Is a program that does not start a boot. It start only when you tell it to by ticking on it.

At times I run several on demand programs checking for infections while still having MSE and Malwerebytes active. It has not caused a problem on my systems.

You must be careful, very careful.
Lots of programs on the net call them selves (anti this or that) and they are not. They are infections themselves.

I would not recommend running Malwarebytes Anti Malware active or on demand with out a active Anti Virus program. You need both.

 

[DavidE]

Here is an article I found on the MalwareBytes site - this is what they say about their own product.

Malwarebytes Anti-Malware is not meant to be a replacement for antivirus software. Malwarebytes Anti-Malware is a complementary but essential program which detects and removes zero-day malware and "Malware in the Wild". This includes malicious programs and files, such as virus droppers, worms, trojans, rootkits, dialers, spyware, and rogue applications that many antivirus programs do not detect or cannot fully remove. That being said, there are many infections that Malwarebytes Anti-Malware does not detect or remove which any antivirus software will, such as file infectors. It is important to note that Malwarebytes Anti-Malware works well and should run alongside antivirus software without conflicts. In some rare instances, exclusions may need to be set for your specific antivirus product to achieve the best possible system performance.

Source: Does Malwarebytes Anti-Malware replace antivirus software?

 

[Layback Bear]

Thank you David. I was looking for that from Malwarebytes.

@Kurdman as I posted before; you will find many opinions on which anti virus program to use.

I see nothing false or untrue posted by DavidW7ncus in this thread.
David and I might choose different security programs now and again but we are both trying to direct you in the same direction; towards a safer computing experience.

Now you have seen our suggestion and guidance.
Let us know what programs you have decided to use and in what fashion.

 

[DavidE]

Thank you Jack (LB) !
Nice post and very well said

 

[mjf]

I still don't fully get the fundamental difference between anti malware and anti virus. Are they overlapping sets of capability? Malwarebytes (on demand) updates its definition files quite regularly but say they are not anti virus. I use Norton 360 for active anti virus but it never seems to pick anything up when Malwarebytes does occasionally. Admittedly Malwarebytes does seem to give more false positives.

 

[Franky]

@Layback Bear & @DavidW7ncus:

First, thank you very much. I look at you as my teacher/instructors.
I'm so busy with with plenty of computer related thing (C++, QT, Computer Networking, A+ technician, Excel 2010, FreeBSD, Ubuntu and etc.). I'm so sorry if I'm late at posting.
But for a small point:
Regardless of sayings of Malwerbyte's website, you separate virus and malware with each other!!
It's very odd. Because virus is a kind of malware.
According to what the words show, Anti-malware is something which is against the malware which a virus is a type of it as well. And anti-virus encounters the viruses. But in effect it also encounters all of the viruses and other malware, like worm.
I'm so sorry for my broken English. I post a complete talk here at first chance.
Thanks again.