COMPUTER VIRUSES

Viruses are nasty programs that infiltrate your computer either through
the internet or through email, downloaded files, or even from store-
bought software.

Frequently, viruses hide inside programs and don't do their damage

until you run the program. Once a virus gets inside your computer, it
can be pretty methodical when doing its damage.

As they go from program to program, they place a flag called a "virus

marker" inside infected programs. If a virus runs into one of these
markers it knows not to replicate itself in that program and will
continue to search for unmarked files. When it runs out of unmarked
files to infect, the virus usually goes to work on the computer's data
and hard drive.
 Once your computer has been infected with a
virus, what kind of damage can it
do?

Well, that depends upon the virus. Some viruses ensure that programs don't work
quite as they should, while others destroy the files on your computer, change the
system files that your computer needs, or cause different kinds of damage. Viruses
are usually written for a specific type of computer; in other words, a virus that is
written for a PC won't infect a Macintosh, and vice versa.
TYPES OF COMPUTER VIRUSES
There are many types of computer viruses:

 File virus : Most viruses fall into this category. A virus attaches itself to a file, usually a
program file.

 Boot sector virus : These viruses infect floppy and hard drives. The virus program will load
first, before the operating system.

 Macro Virus : This is a new type of virus that use an application's own macro programming
feature to distribute themselves. Unlike other viruses, macro viruses do not infect programs;
they infect documents.

 Virus Hoax : Although there are thousands of viruses discovered each year, there are still
some that only exist in the imaginations of the public and the press - known as virus hoaxes.
These viruses hoaxes DO NOT EXIST, despite rumor of their creation and distribution.
 Direct Action Viruses
The main purpose of this virus is to replicate and take action when it is executed. When a
specific condition is met, the virus will go into action and infect files in the directory or folder
that it is in and in directories that are specified in the AUTOEXEC.BAT file PATH. This
batch file is always located in the root directory of the hard disk and carries out certain
operations when the computer is booted.
 Directory Virus
Directory viruses change the paths that indicate the location of a file. By executing
a program (file with the extension .EXE or .COM) which has been infected by a
virus, you are unknowingly running the virus program, while the original file and
program have been previously moved by the virus.
Once infected it becomes impossible to locate the original files.

File Infectors
This type of virus infects programs or executable files (files with an .EXE or .COM
extension). When one of these programs is run, directly or indirectly, the virus is
activated, producing the damaging effects it is programmed to carry out. The
majority of existing viruses belong to this category, and can be classified depending
on the actions that they carry out.
Boot Virus

This type of virus affects the boot sector of a floppy or hard disk. This is a crucial
part of a disk, in which information on the disk itself is stored together with a
program that makes it possible to boot (start) the computer from the disk.

The best way of avoiding boot viruses is to ensure that floppy disks are write-
protected and never start your computer with an unknown floppy disk in the disk
drive.

Examples of boot viruses include: Polyboot.B, AntiEXE.

Companion Viruses

Companion viruses can be considered file infector viruses like resident or

direct action types. They are known as companion viruses because once
they get into the system they "accompany" the other files that already exist.
In other words, in order to carry out their infection routines, companion
viruses can wait in memory until a program is run (resident viruses) or act
immediately by making copies of themselves (direct action viruses).

Some examples include: Stator, Asimov.1539, and Terrax.1069

 10 TIPS TO KEEP
YOUR COMPUTER
VIRUS FREE
1 Install reliable anti-virus software. Anti-virus software scans files regularly
for unusual changes in file size, programs that match the software's database of
known viruses, suspicious email attachments, and other warning signs. It's the most
important step you can take towards keeping your computer clean of viruses.

2 Use common sense. It's always better to err on the side of safety. If you're
unsure about an attachment, delete it. Especially if it's from a source you don't
recognise. If there are tempting animations on a site that look highly unprofessional,
don't download them.
 CONT….

3 Scan your floppies and flash drives before using them. This is always important,
but especially if you are using the disk to carry information between one computer
and another. You could easily pick up a virus from an insecure network and
introduce it into your system. Running a virus scan before launching any of the
programs on the disk will prevent infection.

4 Don't share floppies. Even a well-meaning friend may unknowingly pass along a
virus, Trojan horse, or worm. Label your floppies clearly so you know they're
yours and don't loan them out. If a friend passes you a foreign floppy, suggest an
alternative method of file sharing.
5 Update your anti-virus software frequently. An anti-virus program is only as
good as the frequency with which it is updated. New viruses, worms, and Trojan
horses are born daily, and variations of them can slip by software that is not
current. Norton AntiVirus™ has a feature that searches for new virus definitions
every time you go online, so you are always up to date.

6 Don't download programs from the Web. Unreliable sources such as Internet
newsgroups or Web sites that you haven't heard of may be willing providers of
viruses for your computer. Avoid downloading files you can't be sure are safe. This
includes freeware, screensavers, games, and any other executable program - any
files with an ".exe" or ".com" extension, such as "coolgame.exe." Check to see if
the site has anti-virus software running on their side. If you do have to download
from the Internet, be sure to scan each program before running it. Save all
downloads to one folder, then run virus checks on everything in the folder before
using it.
7 Get immediate protection. Configure your anti-virus software to boot
automatically on start-up and run at all times. This will provide you back-up
protection in case you forget to scan an attachment, or decide not to. And in case you
forget to boot up your anti-virus software, configuring it to start by itself will ensure
you get immediate protection anyway.

8 Scan all incoming email attachments. Be sure to run each attachment you plan to
open through the anti-virus check. Do this even if you recognise and trust the sender;
malicious code, like Trojan horses, can slip into your system by appearing to be from
a friendly source.
 9 Don't boot from a floppy disk. Floppies are one of the most common ways viruses are
transmitted. If you are using a floppy while working on your computer, remove it when you shut the
machine off or the computer will automatically try to boot from the floppy, perhaps launching any
viruses on the disk.

10 Don't automatically open attachments. Be sure your email program doesn't automatically
download attachments. This will ensure that you can examine and scan attachments before they run.
.
Refer to your email program's safety options or preferences menu for instructions
 VIRUSES FAQS

 How do I know if my computer is infected by a virus?

The best way to know this is to use a good, updated antivirus program to scan your system
thoroughly.
There are other signs that can be symptomatic of a virus infection in a computer: general

slowdown, files and/or information disappear, peripheral devices don't function properly etc.
 What can I do to protect myself against viruses?
The solution is to install a good antivirus with daily updates and excellent tech support
services.
 If my computer is switched off, can it be infected by a virus?
No. But a virus could still be dormant inside the computer, waiting for certain 'trigger'
conditions (such as a specific date) to activate and release its payload.
 What effects can viruses have?
Viruses have a wide range of effects, from complete destruction of all information on a computer to
running small joke programs with little or no damaging effects.
 What should I do if I receive a hoax?
If you receive a hoax, bear the following in mind:
Pay no attention to the content of the message.
Don't forward it to anyone.
Do not follow any of the advice or instructions in the message.
Delete the message.
Get information from a reliable source (recognized antivirus companies)