COMPUTER VIRUSES

Computer virus is a hostile program that generally replicates itself and infects other files. These malicious programs are developed by computer hackers and disgruntled programmers. They are usually written in assembly language or high-level language like C. Some of these may be harmless as they display some message or play a tune. But most of the viruses are highly harmful to compute systems. The harm done to the computer system depends on the type of virus and frequency of its strike. Viruses are quite common in DOS and Windows environments. The normally spread through CD carrying pirated software. With microcomputers joining the Internet, the spread of virus is swift and wide through this global network.

A computer virus is a small software program that spreads from one computer to another computer and that interferes with computer operation. A computer virus may corrupt or delete data on a computer, use an e-mail program to spread the virus to other computers, or even delete everything on the hard disk. Computer viruses are most easily spread by attachments in e-mail messages or by instant messaging messages. Therefore, you must never open an e-mail attachment unless you know who sent the message or unless you are expecting the e-mail attachment. Computer viruses can be disguised as attachments of funny images, greeting cards, or audio and video files. Computer viruses also spread by using downloads on the Internet.

Almost all viruses are attached to an executable file, which means the virus may exist on your computer but it actually cannot infect your computer unless you run or open the malicious program. It is important to note that a virus cannot be spread without a human action, (such as running an infected program) to keep it going. Symptoms of a computer virus If you suspect or confirm that your computer is infected with a computer virus, obtain the current antivirus software. The following are some primary indicators that a computer may be infected: The computer runs slower than usual. The computer stops responding, or it locks up frequently. The computer crashes, and then it restarts every few minutes. The computer restarts on its own. Additionally, the computer does not run as usual.

Applications on the computer do not work correctly. Disks or disk drives are inaccessible. You cannot print items correctly. You see unusual error messages. You see distorted menus and dialog boxes. An antivirus program is disabled for no reason. Additionally, the antivirus program cannot be restarted. New icons appear on the desktop that you did not put there, or the icons are not associated with any recently installed programs. Strange sounds or music plays from the speakers unexpectedly. A program disappears from the computer even though you did not intentionally remove the program.

Symptoms that may be the result of ordinary Windows functions A computer virus infection may cause the following problems: Windows does not start even though you have not made any system changes or even though you have not installed or removed any programs. There is frequent modem activity. If you have an external modem, you may notice the lights blinking frequently when the modem is not being used. You may be unknowingly supplying pirated software. Windows does not start because certain important system files are missing. Additionally, you receive an error message that lists the missing files. The computer runs very slowly. Additionally, the computer takes longer than expected to start. You receive out-of-memory error messages even though the computer has sufficient RAM.

New programs are installed incorrectly. Windows spontaneously restarts unexpectedly. A disk utility such as Scandisk reports multiple serious disk errors. A partition disappears. The computer always stops responding when you try to use Microsoft Office products. You cannot start Windows Task Manager. Antivirus software indicates that a computer virus is present.

The Difference between a Computer Virus and Worm Viruses and worms are all malicious programs that can cause damage to your computer, but there are differences among the two. What Is a Virus? A computer virus attaches itself to a program or file enabling it to spread from one computer to another, leaving infections as it travels. Like a human virus, a computer virus can range in severity: some may cause only mildly annoying effects while others can damage your hardware, software or files. Almost all viruses are attached to an executable file, which means the virus may exist on your computer but it actually cannot infect your computer unless you run or open the malicious program. It is important to note that a virus cannot be spread without a human action, (such as running an infected program) to keep it going.

What Is a Worm? A worm is similar to a virus by design and is considered to be a sub-class of a virus. Worms spread from computer to computer, but unlike a virus, it has the capability to travel without any human action. A worm takes advantage of file or information transport features on your system, which is what allows it to travel unaided. The biggest danger with a worm is its capability to replicate itself on your system, so rather than your computer sending out a single worm, it could send out hundreds or thousands of copies of itself, creating a huge devastating effect. One example would be for a worm to send a copy of itself to everyone listed in your email address book. Then, the worm replicates and sends itself out to everyone listed in each of the receiver's address book, and the manifest continues on down the line.

How to protect your computer against viruses If you are using Windows XP, always turn on the firewall. Always run all necessary latest updates & service packs Run your anti-virus program everyday (some do it every week) There are many virus programs that you can get for free scanning. Run your anti-spyware/adaware once a week Never open mails that are suspicious to you or not known to you. Be very careful when downloading files or any programs from the internet, pay attention on the instructions while downloading it. Downloading may sometimes cause error on the system registry or the entire computer system

Be careful with files that come from a floppy disk or any other external storage when you open it in your CD ROM of floppy drive. You should know its source, or better yet, when you insert it, have it scanned with your anti-virus program before you open the files. Run defragmentation, disk clean up, registry scanner at least once a week.

TYPES OF VIRUSES
Resident Viruses

This type of virus is a permanent which dwells in the RAM memory. From there it can overcome and interrupt all of the operations executed by the system: corrupting files and programs that are opened, closed, copied, renamed etc. Direct Action Viruses The main purpose of this virus is to replicate and take action when it is executed. When a specific condition is met, the virus will go into action and infect files in the directory or folder that it is in and in directories that are specified in the AUTOEXEC.BAT file PATH. This batch file is always located in the root directory of the hard disk and operations when the computer is booted. carries out certain

Boot Virus This type of virus affects the boot sector of a floppy or hard disk. This is a crucial part of a disk, in which information on the disk itself is stored together with a program that makes it possible to boot (start) the computer from the disk. Macro Virus Macro virus is another type of virus that infects MS Word and MS Excel documents. File Virus This virus attaches itself to executable files. When the executable file is activated, the activated virus also gets activated. Once activated, it infects other files. Multipartite Virus This virus affects both boot sector and files and is more dangerous than Boot Sector and File Virus.

Antivirus or anti - virus software is used to prevent, detect, and remove computer viruses, worms, and trojan horses.

How AntiVirus Works Computer Anti-Virus Software is a program that specializes in identifying harmful Computer Viruses. Once these viruses have been identified, your antivirus program will then either neutralize (often by putting in "Quarantine") or delete the virus so that it cannot harm your computer. There are many types of computer viruses out there these days so anti-virus programs actually catch more than just a virus. Most anti-virus software can now detect Computer Viruses, Worms, Spyware, Trojans, Malware, and Phishing attacks. The more complex your anti-virus program is, the better protected your computer system will be.

Suspicious Behavior Approach There are several different methods that antivirus programs use to detect computer viruses. With the Suspicious Behavior approach , your anti-virus program will monitor the behavior of programs on your computer. The suspicious behavior approach is one of the better virus detection methods because it will not only detect suspicious behavior from programs currently running on your computer, but it will also detect the behaviors of new viruses that show up on your system.

Dictionary Approach With the Dictionary Approach, your anti-virus program will scan your computers files when they are created, opened, closed or emailed on your computer. The benefit of this, is that it can pick up a virus as soon as it is received. The downside to the dictionary approach, is that the anti-virus program can only detect viruses that are known in a dictionary or comprehensive database of known computer viruses. This means your anti-virus program will only pick up viruses that are known and can miss newer, nonregistered viruses that can still infect your computer.

These are the most common forms of anti-virus approaches that are used in anti-virus software on the market today. Many antivirus programs on the market today, such as Norton Antivirus, Norton 360, Norton Internet Security, NOD32 Anti-Virus, and Kaspersky AntiVirus, use a combination of both the Suspicious Behavior and Dictionary Approach as well as other methods to detect computer viruses.