Question 29 - Sample Paper 1 by Teachoo - Teachoo Sample Paper

Mr. Kumar has just downloaded a file named “Report.pdf” from an unknown source. After opening the file, he noticed that his computer started to behave strangely and some of his files were deleted. He realized that the file was actually a malware that disguised itself as a PDF document. Help him in identifying the type of malware (virus, trojan, or adware) and explaining its characteristics.

Thereafter, write the steps to remove the malware from his computer using an antivirus software.

Answer:

Answer by student

The type of malware is a trojan . A trojan is a malicious program that pretends to be a legitimate or harmless file, but actually performs harmful actions when executed. A trojan can delete, modify, or steal data, create backdoors for remote access, or download other malware.

To remove the trojan from his computer, Mr. Kumar can follow these steps:

• Disconnect his computer from the internet to prevent further damage or spread of the malware.
• Scan his computer with an updated antivirus software and delete any detected threats.

• Restore his deleted files from a backup or a recovery tool if possible.
• Change his passwords and monitor his online accounts for any suspicious activity.

Detailed answer by teachoo

• A malware is a malicious software that can harm a computer system or network, or compromise its security or performance. There are different types of malware, such as viruses, trojans, and adware.
• The type of malware that Mr. Kumar encountered is a trojan . A trojan is a malicious program that pretends to be a legitimate or harmless file, such as a document, an image, or a game, but actually performs harmful actions when executed. A trojan can delete, modify, or steal data, create backdoors for remote access, or download other malware. A trojan does not replicate itself like a virus, but relies on user interaction or social engineering to trick the user into running it.
• Some of the characteristics of a trojan are:
• It disguises itself as a benign or useful file to deceive the user.
• It executes malicious code when the user opens or runs the file.
• It can perform various harmful actions, such as deleting files, stealing information, spying on user activity, or allowing remote control.
• It can download or install other malware on the infected system.
• It can evade detection by antivirus software by using encryption, compression, or obfuscation techniques.
• To remove the trojan from his computer, Mr. Kumar can follow these steps:
• Disconnect his computer from the internet to prevent further damage or spread of the malware. This will also stop any communication between the trojan and its creator or controller.
• Scan his computer with an updated antivirus software and delete any detected threats. He should use a reputable and reliable antivirus software that can detect and remove various types of malware. He should also update his antivirus software regularly to protect his system from new threats.
• Restore his deleted files from a backup or a recovery tool if possible. If he has a backup of his important files on an external device or a cloud service, he can restore them after removing the malware. If he does not have a backup, he can try to use a data recovery tool to recover his deleted files from his hard drive.

Change his passwords and monitor his online accounts for any suspicious activity. Since the trojan may have stolen his personal or financial information, he should change his passwords for his online accounts and services. He should also check his bank statements, credit reports, and email history for any unauthorized transactions or messages.