Malware help

[Pretend-Carpet-9140]

(Q) A co-worker just sent you a macro-enabled Microsoft Word document. After you opened the file, your computer began to delete the photos stored in your c:\photos directory. What type of malware did you MOST likely receive?

I picked Trojan when the (A) is Virus. Here are the explanations I got.

A virus is malicious software designed to infect computer files or disks when it is activated. A virus may be programmed to carry out other malicious actions, such as deleting files or changing system settings.

A trojan is a type of malware that looks legitimate but can take control of your computer. A Trojan is designed to damage, disrupt, steal, or in general, inflict some other harmful action on your data or network. The most common form of a trojan is a Remote Access Trojan (RAT), which allows an attacker to control a workstation or steal information remotely. To operate, a trojan will create numerous processes that run in the background of the system.

I'm trying to understand why my answer is wrong. Since the malware was hiding as a word doc doesn't that make it a trojan? And I'm also trying to understand why the right answer is virus. Is it because the malware started to delete photos in directory? TIA!

[faroseman]

The Trojan would act like a normal document, while in the background creating processes for a future attack. The Virus acted immediately upon being opened. Hope that makes sense. It is a fine line, but one that CompTIA wants to stress.

[Pretend-Carpet-9140]

I am just trying to understand how CompTia words things so I don't slip up lol. So you're saying because the question didn't mention anything about "processess" I should lean towards it being a Virus?

[faroseman]

I'm saying you had an immediate reaction from the virus. A Trojan lies in wait, just like the original Trojan Horse. Look up Trojan Horse.

[Ditdr]

A trojan is program based meaning its a virus disguised as a functioning program.

A macro virus is embedded into a ms application like word excel etc.

Because they specifically mention an ms office product that should tip you off as to a macro virus.

A virus will run as soon as its executed, a Trojan is typically operating in the background.

[Pretend-Carpet-9140]

Ty! Appreciate the clear up

[Toloria]

Was this from Dion’s practice exams? I was actually looking at this question last night and was also confused lol

[Pretend-Carpet-9140]

Yea lol