A friend has called you about a possible computer problem because her computer is acting strangely. Sounds play unexpectedly, the monitor turns off suddenly, the hard-drive light flashes constantly…

Question

Options

• AThe computer has been infected with a polymorphic virus.
• BThe computer is experiencing a denial-of-service attack.
• CThe computer has been infected with an illicit server.
• DThe computer has been infected by a worm.

• A
  5% (2)
• B
  16% (7)
• C
  73% (32)
• D
  7% (3)

Explanation

Option C is correct because an illicit server (commonly known as a Remote Access Trojan or RAT) installs a hidden server component on the victim's machine and opens ports to await commands from a remote attacker - explaining every symptom: the attacker is literally controlling the computer by playing sounds, shutting off the monitor, and triggering reboots. The open ports are the smoking gun, as they are the communication channels the attacker uses.

Why the distractors are wrong:

• (A) Polymorphic virus - changes its own code to evade detection; it doesn't open ports or enable remote control of a machine.
• (B) Denial-of-service attack - floods a system to make it unavailable; it doesn't grant an attacker interactive control, and the described symptoms suggest deliberate remote manipulation, not resource exhaustion.
• (D) Worm - self-replicates and spreads across networks but doesn't provide an attacker with a remote control interface; worms cause network congestion, not targeted actions like toggling sound and display.

Memory tip: Think "illicit server = open door." The malware serves the attacker by opening ports (doors) so they can walk in and control your machine - if strange things are happening and ports are open, someone is home that shouldn't be.

No community discussion yet for this question.