Malicious Mobile Code: Virus Protection for Windows (OReilly Computer Security)

By Roger A. Grimes

Slots : 1

W2K prefix (Windows 2000-specific viruses) 

W2K.Installer virus 

W2KM_PSD virus 

W32 prefix (32-bit malicious code that can infect all 32-bit Windows platforms) 

W32.Gspot.Worm 

W32.Kriz 

W32.Melting.Worm 

W95 prefix (Windows 95-specific malicious mobile code) 

W95.Babylonia 

W95.CIH virus  2nd 

W95.MTX 

W97M.Marker 

W97M.Melissa.AA 

W97M.Melissa.ac 

W98 prefix (Windows 98-specific malicious mobile code) 

W9x prefix (Windows 9x-specific malicious mobile code) 

War bots 

warm boot 

warnings, unexplained 

Wazzu virus 

WDCTRL (Windows 32-bit disk driver) 

web buffer overflow 

web bugs  

web chat servers 

web scripts 

web sites, hoaxes  

web spoofing 

web-based email  2nd 

WebBot 

WebEx Trojan horse 

WebTV 

Wells, Joe 

WFP (Windows File Protection)  2nd 

Whack-a-Mole Trojan horse  2nd 

WhackJob Trojan horse 

WHOIS command, IRC 

Wild List  2nd 

Win prefix (Windows 3. x-specific code) 

WIN-BUGSFIX.EXE 

WIN.COM 

WIN.INI  2nd  3rd  4th 

Win16 prefix (Windows 3.x-specific code) 

Win2K.Stream virus 

Win32 API  2nd 

Win32 prefix (32-bit malicious code that can infect all 32-bit Windows platforms) 

Win32.Bolzano virus 

Win32.Cabanas virus 

Win32.Crypto virus 

Win32.CTX virus 

Win32.ExplorerZip 

Win32.FunLove virus 

Win32.Happy99.Worm 

Win32.Kriz virus 

Win32.Legacy virus 

Win32.PrettyPark 

Win32.Qaz 

Win32.Ska-Happy99 

Win32.Thorin virus 

Win32.TrinZombie Trojan 

Win32.Winux 

WIN386.EXE 

Win95.Babylonia virus 

Win95.CIH 

Win95.Fono virus 

Win95.Prizzy virus 

WinChat 

WinCrash Trojan horse 

Wincrash Trojan horse 

Wincrash2 Trojan horse 

Windows 2000  2nd 

    Active Directory service 

    Advanced Configuration and Power Interface (ACPI) 

    AutoComplete 

    Disk Quotas 

    Distributed File System (DFS) 

    Driver Signing 

    Encrypting File System 

    File Signature Verification 

    Microsoft Management Console (MMC) 

    Offline Files and Folders 

    registry 

    Run As feature 

    Safe mode 

    Security Configuration tool 

    signed macros 

    Window Installer 

Windows 2000 Recovery Console 

Windows 2000-specific viruses prefix (W2K) 

Windows 3.x-specific code prefix (Win or Win16) 

Windows 9.x startup programs 

Windows 95-specific malicious mobile code prefix (W95) 

Windows 98 Resource Kit 

Windows 98-specific malicious mobile code prefix (W98) 

Windows 9x-specific malicious mobile code prefix (W9x) 

Windows Explorer  2nd 

Windows File Protection (WFP)  2nd 

Windows help files 

Windows Help files 

Windows Installer 

Windows Internet Name Service (WINS) 

Windows Media Download files 

Windows Media Player  2nd 

Windows Media Player Active Stream Redirector files 

Windows Media Player Skin files 

Windows Millenium Edition (ME) 

Windows Millennium Edition (ME) 

Windows NT 

    administrators 

    auditing 

    boot process 

    domains 

    file streams 

    Local Security Authority (LSA) 

    logging 

    multiboot 

    New Technology file system (NTFS) 

    Security Account Manager (SAM) 

    Security Identifier (SID) 

    system accounts 

Windows NT command scripts 

Windows NT-specific malicious mobile code prefix (WNT or WinNT) 

Windows Screensaver files 

Windows Script Component (.WSC and .SCT) 

Windows Script Component files 

Windows Script files 

Windows Scripting Host  2nd  3rd 

Windows Scripting Host (WSH)  2nd  3rd 

Windows shortcut files 

Windows virtual device driver files 

Windows viruses

    16-bit 

    32-bit 

    32-bit performance disabled 

    antivirus scanners  

    Babylonia virus 

    Bolzano virus 

    boot problems 

    boot viruses 

    CIH virus 

    Crypto virus 

    device drivers 

    Fono virus 

    FunLove virus 

    history 

    infected PC, unplugging from network 

    Infis virus 

    installation errors 

    Kriz virus 

    Legacy virus 

    newly modified executables 

    platform-specific 

    preventing 

    Prizzy virus 

    programs that start automatically 

    programs won•t start 

    Remote Explorer virus 

    removing 

    Safe mode 

    SCANDISK.EXE 

    signs and symptoms 

    Stream virus 

    swap file problems 

    Thorin virus 

    unexpected messages 

    Windows NT STOP errors 

Windows XP  2nd 

WINHELP.EXE 

WININIT.INI  2nd 

WinJab 

WINLOGON.EXE 

WinNT prefix (Windows NT-specific malicious mobile code) 

WinNT.Infis virus 

WinNT.Remote Explorer 

WINOLDAP.MOD 

WinPopUp 

WINS (Windows Internet Name Service) 

WINSOCK.VBS 

WINSTART.BAT  2nd  3rd  4th 

Winternals  2nd 

WinVir virus  2nd 

WINWORD6.INI 

wireless PDAs 

WM prefix (Word macro virus) 

WM.Ethan virus 

WNT prefix (Windows NT-specific malicious mobile code) 

WNT. 

WNT.Remote Explorer virus 

Wobbler virus hoax 

Word macro virus prefix (WM) 

Word Mail Merge Vulnerability 

WordBasic 

WordPerfect  2nd 

Workbook_Activate macro 

Workbook_Deactivate macro 

Workgroup template subdirectory 

World Trade Organization (WTO) 

World Virus Tracking Center 

worms  2nd 

    BubbleBoy 

    detecting 

    email 

    IRC 

    JS.KAK 

    Life Stages 

    Mr. Wormy 

    preventing 

    Qaz 

    removing 

    Simsalapim 

    symptoms of 

    Trojan horses, compared to 

    WebTV 

write-protection tab, floppy diskettes 

WriteFile API function 

writing viruses, programming skills required for 

WSCRIPT.EXE  2nd  3rd  4th 

WSH (Windows Scripting Host)  2nd  3rd 

WSHEXT.DLL 

WSHOM.OCX 

WSIRC 

WSOCK32.DLL 

WTO (World Trade Organization)