COMPUTER VIRUS AND TYPES

ASSIGNMENT #02 SEMESTER FALL 2018

Submission Date (December 12, 2018)
BY
NAFISA IJAZ
17061517-012
Introduction to Computer Application (IT-101)
BS. English (CeLTS) 3rd Semester
Submitted To
Sir Muhammad Kamran
Center for Languages and Translation Studies

UNIVERSITY OF GUJRAT
 WHAT IS COMPUTER VIRUS?
Virus: A self-replicating piece of computer code that can partially or fully attach itself to
files or applications, and can cause your computer to do something you don't want it to do.
Computer Virus Time Line

• 1949 - Theories for self-replicating programs was first developed.

• 1981 - Apple Viruses 1, 2, and 3 was some of the first viruses in public.

• 1988 – Jerusalem was detected. Activated every Friday the 13th, the virus affects both .EXE
and .COM files and deletes any programs run on that day.

• 1991 - Tequila is the first widespread polymorphic virus found.

• 1999 - The Melissa virus, W97M/Melissa, executed a macro in a document attached to an

email. Melissa spread faster than any other previous virus.

• 2000 - The Love Bug, also known as the ILOVEYOU virus, sent itself out via Outlook, much
like Melissa.

• 2001 - The Code Red I and II worms attacked computer networks in July and August. They
affected over 700,000 computers and caused upwards of 2 billion in damages.

TYPES OF COMPUTER VIRUS

• Boot Sector Virus

Michelangelo Boot sector viruses infect the boot sectors on floppy disks and hard disks, and
can also infect the master boot record on a user's hard drive.

• File Infector Virus

CIH Operate in memory and usually infect executable files.

• Multi-partite Virus

Multi-partite viruses have characteristics of both boot sector viruses and file infector viruses.

• Macro Virus

Melissa Macro Virus They infect macro utilities that accompany such applications as Microsoft
Word, Excel and outlook.

• Trojan / Trojan Horse

Back Orifice A Trojan or Trojan Horse is a program that appears legitimate, but performs some
malicious and illicit activity when it is run.
• Worm – Red Code

A worm is a program that spreads over network. Unlike a virus, worm does not attach itself to
a host program. It uses up the computer resources, modifies system settings and eventually puts
the system down. Worms are very similar to viruses in that they are computer programs that
replicate themselves. The difference is that unlike viruses, worms exist as a separate small piece
of code. They do not attach themselves to other files or programs.

Virus Characteristics

• Memory Resident:

Loads in memory where it can easily replicate itself into programs of boot sectors. Most
common.

• Non-Resident:

Does not stay in memory after the host program is closed, thus can only infect while the
program is open. Not as common.

• Stealth:

The ability to hide from detection and repair in two ways. - Virus redirects disk reads to avoid
detection. - Disk directory data is altered to hide the additional bytes of the virus.

• Encrypting:

Technique of hiding by transformation. Virus code converts itself into cryptic symbols.
However, in order to launch (execute) and spread the virus must decrypt and can then be
detected.

• Polymorphic:

Ability to change code segments to look different from one infection to another. This type of
virus is a challenge for ant-virus detection methods.

Work of computer virus

• The Basic Rule:

A virus is inactive until the infected program is run or boot record is read. As the virus is
activated, it loads into the computers memory where it can spread itself.

• Boot Infectors:
If the boot code on the drive is infected, the virus will be loaded into memory on every startup.
From memory, the boot virus can travel to every disk that is read and the infection spreads.

• Program Infectors:

When an infected application is run, the virus activates and is loaded into memory. While the
virus is in memory, any program file subsequently run becomes infected.

Anti-Virus Software

Antivirus software is a type of utility used for scanning and removing viruses from your
computer. While many types of antivirus (or "anti-virus") programs exist, their primary purpose
is to protect computers from viruses and remove any viruses that are found.

Antivirus technology

Some Symptoms of virus

Program takes longer to load.

The program size keeps changing.

The drive light keeps flashing when you are not doing anything.

User created files have strange names.

The computer doesn't remember CMOS settings.

How to detect virus?

Use Antivirus Software to scan the computer memory and disks.

A memory-resident anti-virus software can be used to continuously monitor the computer for
viruses.

Scan your hard disk with an anti-virus software. You should make sure that an up-to-date virus
definition data have been applied.

Use server-based anti-virus software to protect your network.

How to clean virus?

All activities on infected machine should be stopped and it should be detached from the
network.

Recover from backup is the most secure and effective way to recover the system and files.
In some cases, you may recover the boot sector, partition table and even the BIOS data using
the emergency recovery disk.

In case you do not have the latest backup of your files, you may try to remove the virus using
anti-virus software.

The steps to reinstall the whole system

• Reboot the PC using a clean startup disk.

• Type in MBR to rewrite the Master Boot Record.

• Format DOS partitions.

• Reinstall Windows XP or other OS and other applications.

• Install Antivirus Software and apply the latest virus definition data.

Best Practices to save the PC from Virus

• Regular Backup

Backup your programs and data regularly. Recover from backup is the most secure way to
restore the files after a virus attack.

• Install Anti-virus Software

Install an anti-virus software to protect your machine and make sure that an up-to-date virus
definition file has been applied.

• Daily Virus Scan

Schedule a daily scan to check for viruses. The schedule scan could be done in non-peak
hours, such as during the lunchbreak or after office hour.

• Check Downloaded Files and Email Attachments

Do not execute any downloads and attachment unless you are sure what it will do

Advantages of Computer Virus

i. A virus can be a way for a hacker or programmer to show off his ability. Some firms
even hire ex-hackers to create virus protection and other types of software.
ii. A computer virus can be used to steal people's personal information. Although illegal,
this can be very useful and profitable for those stealing and then selling on or using the
information gained in this way.
iii. A virus is able to take control of a person's computer.
iv. Online advertising is often targeted by hackers, who make money from virus-related
scams (for example 'click jacking')
v. Computer viruses are considered an important part of technological warfare. For
example, Iran has accused several countries of targeting (and successfully shutting
down) their illegal nuclear facilities, using computer viruses.

Disadvantages of Computer Virus

• Computer viruses cause billions of dollars, worth of economic damage each year, due
to causing systems failure, wasting computer resources, corrupting data, increasing
maintenance costs, etc.