ComputerViruses-AnIntroductioncomputervirus.pdfVIP

Computer Viruses - An Introduction An in-depth overview on what computer viruses are and the different types of virus threats. A computer virus is a program that explicitly copies itself. This may lead to it spreading from machine to machine and is typically done without the user’s knowledge or permission. Viruses, by definition, add their code to your system in such a way that when the infected part of the system executes, the virus does also. There are various types of viruses: Boot viruses place (some of) their code in the disk sector whose code the machine will automatically execute when booting. Thus, when an infected machine boots, the virus loads and runs. After boot viruses are finished loading, they usually load the original boot code, which they have previously moved to another location, or take other measures to ensure the machine appears to boot normally. File viruses attach to ‘program files’ (files containing executable or interpretable code) in such a way that when you run the infected program, the virus code executes. Usually the virus code is added in such a way that it executes first, although this is not strictly necessary. After the virus code has finished loading and executing, it will normally load and execute the original program it has infected, or call the function it intercepted, so as to not arouse the user’s suspicion. Macro viruses are really j ust a type of file virus, but a particularly ‘successful’ type. They copy their macros to templates and/or other application document files. Although ‘auto macros’ were almost exclusively used by early macro viruses (often to ensure the virus’ code is the first to execute when infected templates or documents were opened), several other mechanisms are also available – in fact, some of these, such as taking over standard internal functions