nerdexam
GIAC

GCIH · Question #404

MyDoom, Zotob, and Blaster are all examples of what type of malware?

The correct answer is C. Worms. MyDoom, Zotob, and Blaster are self-replicating worms that spread across networks by exploiting OS vulnerabilities without requiring user interaction.

Malware Analysis & Advanced Persistent Threats

Question

MyDoom, Zotob, and Blaster are all examples of what type of malware?

Options

  • ATrojans
  • BKernel-Mode Rootkits
  • CWorms
  • DBrowser Helper Objects (BHOs)

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    86% (48)
  • D
    9% (5)

Why each option

MyDoom, Zotob, and Blaster are self-replicating worms that spread across networks by exploiting OS vulnerabilities without requiring user interaction.

ATrojans

Trojans masquerade as legitimate software to trick users into executing them; none of the three listed malware families used this delivery mechanism as their primary propagation method.

BKernel-Mode Rootkits

Kernel-mode rootkits operate at ring-0 to hide their presence on a compromised system - a persistence and stealth mechanism, not a propagation class.

CWormsCorrect

All three are network worms - Blaster exploited MS03-026 (RPC DCOM), Zotob exploited MS05-039 (Plug and Play), and MyDoom propagated via email and peer-to-peer networks. Worms define themselves by autonomous self-propagation across systems without needing a host file.

DBrowser Helper Objects (BHOs)

Browser Helper Objects are DLLs loaded by Internet Explorer to extend browser functionality and are used by adware or spyware, not by self-replicating network malware.

Concept tested: Classification of self-replicating network worms

Source: https://www.cisa.gov/news-events/alerts/2004/01/28/mydoom-worm

Topics

#worms#malware classification#network propagation

Community Discussion

No community discussion yet for this question.

Full GCIH Practice