Security terms get mixed together so often that every warning starts to sound the same. The useful distinction is simple: malware is the broad category, while virus, spyware, ransomware, worm, trojan, adware, and browser hijacker describe specific behaviors inside that category.
Does this affect you?
Use this for Windows, Mac, Android, and iPhone when you are trying to understand an infection warning, antivirus result, or suspicious device behavior.
Understand how the terms relate
Malware is the umbrella. The others are more specific labels.
- Malware means malicious software. Any program built to damage a device, steal information, monitor activity, hijack settings, or extort money is malware.
- A virus is malware that attaches to legitimate files or programs and spreads when those files are shared or run. True file-infecting viruses are less common than they used to be, but the word remains popular shorthand.
- Spyware is malware designed to watch quietly. It may log keystrokes, capture passwords, track browsing, read messages, or send private data without obvious symptoms.
- Ransomware locks or encrypts files and demands payment. Unlike spyware, it wants you to notice because the ransom message is the pressure mechanism.
- A worm spreads on its own by exploiting network or software weaknesses. A trojan pretends to be a normal app, update, game, or utility so you install it yourself.
- Adware and browser hijackers focus on ads, redirects, search changes, homepage changes, and unwanted extensions, though they still fall under the malware umbrella when deceptive or abusive.
When an app says virus scan, it is usually scanning for malware broadly, not only old-style computer viruses.
Figure out what you are actually dealing with
Symptoms can point toward the likely category.
- Locked files plus a payment note usually means ransomware. Disconnect from the internet and get help before paying or experimenting.
- Constant popups, a changed homepage, redirects, or a slow browser often point to adware or a browser hijacker.
- No obvious symptoms but unfamiliar account logins or stolen passwords can indicate spyware or a credential-stealing trojan.
- A program that sends messages, uses the camera, drains the battery, or runs in the background after installation may be a trojan.
- Suspicious file behavior spreading across documents or programs is closer to a classic virus pattern.
More control
Start with a reputable scan
Regardless of the exact label, the first cleanup step is usually a full scan with Windows Security, Microsoft Defender, or another trusted security tool, followed by the tool’s removal guidance.
Respond based on the category
Ransomware calls for disconnection and careful recovery. Spyware means passwords may need to be changed after removal. Fake virus popups, by contrast, often mean no infection at all and are trying to scare you into calling fake support.
Why antivirus still has that name
Early security software targeted self-replicating viruses, so antivirus became the product name. Modern tools detect many malware types using signatures, cloud checks, and behavior monitoring.
Sources
- CISA – Understanding Malicious Cyber Actors and Malware (2025)
- Microsoft Support – Protect my PC from viruses (2025)
- FTC Consumer Advice – Malware (2025)