COMPUTER VIRUS

A computer virus is a computer program that can replicate itself and spread from one computer to another. A true virus can spread from one computer to another when its host is taken to the target computer; for instance because a user sent it over a network or the Internet or carried it on a removable medium such as a floppy disk, CD, or USB drive. Viruses can increase their chances of spreading to other computers by infecting files on a network file system or a file system that is accessed by another computer.

Infection strategies
Nonresident viruses :-

Nonresident viruses Resident viruses

Nonresident viruses can be thought of as consisting of a finder module and a replication module. The finder module is responsible for finding new files to infect. For each new executable file the finder module encounters, it calls the replication module to infect that file.

Resident viruses :Resident viruses contain a replication module that is similar to the one that is employed by nonresident viruses. This module, however, is not called by a finder module. The virus loads the replication module into memory when it is executed instead and ensures that this module is executed each time the operating system is called to perform a certain operation. The replication module can be called, for example, each time the operating system executes a file. In this case the virus infects every suitable program that is executed on the computer. Types:- Fast infectors & Slow infectors. Fast infectors rely on their fast infection rate to spread. Slow infectors are designed to infect hosts infrequently.

Viruses have targeted various types of transmission media or hosts:1)Binary executable files (such as COM files and EXE files in MS-DOS, Portable Executable files in Microsoft Windows, the Mach-O format in OSX, and ELF files in Linux). 2)Volume Boot Records of floppy disks and hard disk partitions. 3)The master boot record (MBR) of a hard disk. 4)General-purpose script files (such as batch files in MS-DOS and Microsoft Windows, VBScript files, and shell script files on Unix-like platforms). 5)Script files (such as Telix-scripts) 6)System specific autorun script files (such as Autorun.inf file needed by Windows to automatically run software stored on USB Memory Storage Devices). 7)Documents that can contain macros (such as Microsoft Word documents, Microsoft Excel spreadsheets, AmiPro documents, and Microsoft Access database files)

Symptoms of a computer virus

The following are some primary indicators that a computer may be infected:1)The computer runs slower than usual. 2)The computer stops responding, or it locks up frequently. 3)The computer crashes, and then it restarts every few minutes. 4)The computer restarts on its own. Additionally, the computer does not run as usual. 5)Applications on the computer do not work correctly. 6)Disks or disk drives are inaccessible. 7)You cannot print items correctly. 8)You see distorted menus and dialog boxes. 9)There is a double extension on an attachment that you recently opened, such as a .jpg ,.gif, or .exe. extension. 10)An antivirus program is disabled for no reason. Additionally, the antivirus program cannot be restarted. 11)An antivirus program cannot be installed on the computer, or the antivirus program will not run. 12)New icons appear on the desktop that you did not put there, or the icons are not associated with any recently installed programs. 13)Strange sounds or music plays from the speakers unexpectedly.

Symptoms of worms and Trojan horse viruses in e-mail messages

When a computer virus infects e-mail messages or infects other files on a computer, you may notice the following symptoms: 1)The infected file may make copies of itself. This behavior may use up all the free space on the hard disk. 2)A copy of the infected file may be sent to all the addresses in an e-mail address list. 3)The computer virus may reformat the hard disk. This behavior will delete files and programs. 4)The computer virus may install hidden programs, such as pirated software. This pirated software may then be distributed and sold from the computer. 5)The computer virus may reduce security. This could enable intruders to remotely access the computer or the network. 6)You receive an e-mail message that has a strange attachment. When you open the attachment, dialog boxes appear, or a sudden degradation in system performance occurs. 7)Someone tells you that they have recently received e-mail messages from you that contained attached files that you did not send. The files that are attached to the e-mail messages have extensions such as .exe, .bat, .scr, and .vbs extensions.

Spywares
What is Spyware? Spyware can install on your computer without your knowledge. These programs can change your computer s configuration or collect advertising data and personal information. Spyware can track internet searching habits and possibly redirect web site activity. Symptoms of Spyware 1)Slow internet connection. 2)Changing your web browser s home page. 3)Loss of internet connectivity. 4)Failure to open some programs, including security software. 5)Unable to visit specific websites, which may include redirecting you to another one.

How to remove a computer virus and spyware.

Even for an expert, removing a computer virus or spyware can be a difficult task without the help of computer malicious software removal tools. Some computer viruses and other unwanted software reinstall themselves after the viruses and spyware have been detected and removed. Fortunately, by updating the computer and by using malicious software removal tools, you can help permanently remove unwanted software. To remove a computer virus and other malicious software, follow these steps: Install the latest updates from Microsoft Update : For Windows Vista and Windows 7: 1)Click the Pearl (Start) button, then type Windows Update in the search box. 2)In the results area, click Windows Update. 3)Click Check for Updates. 4)Follow the instructions to download and install the latest Windows Updates.

For Windows XP: 1)Click Start, then click Run. 2)Type sysdm.cpl and press the Enter key. 3)Click the Automatic Updates tab and choose the Automatic (recommended) option. 4)Click OK. 5)Use the Microsoft Safety Scanner

Reference :(1)The Giant black book of Computer Viruses by Mark A. Ludwig (2) Computer Viruses For Dummies by Peter H. Gregory (3) Google.com & wikipedia.com

THANK YOU !!!!