Computer Virus Notes
Definition
A computer virus is a type of malicious software program ("malware")
that, when executed, replicates itself by modifying other computer
programs and inserting its own code.
Characteristics
1. Self-replicating: Spreads by copying itself to other files/programs
2. Requires host: Needs a host program to execute
3. Payload: May carry harmful instructions (not all viruses have
payloads)
4. Stealth: Often tries to hide its presence
Types of Viruses
By Target
1. File infectors: Attach to executable files (.exe, .com)
2. Boot sector viruses: Infect master boot record (MBR)
3. Macro viruses: Infect documents with macros (Word, Excel)
4. Script viruses: Written in scripting languages (JavaScript, VBScript)
By Behavior
1. Resident viruses: Load into memory and remain active
2. Non-resident viruses: Execute and spread only when host runs
3. Polymorphic viruses: Change code signature to avoid detection
4. Metamorphic viruses: Can rewrite themselves completely
5. Stealth viruses: Hide modifications from detection
Common Infection Vectors
1. Email attachments
2. Infected software downloads
3. Removable media (USB drives)
4. Network shares
5. Exploiting software vulnerabilities
6. Malicious websites/drive-by downloads
Symptoms of Infection
Slow computer performance
Frequent crashes/freezes
Unknown processes running
Changed file sizes/dates
Unexpected pop-ups
Disabled security software
Missing/modified files
Unusual network activity
Notable Historical Viruses
1. ILOVEYOU (2000): Spread via email attachment
2. Melissa (1999): Macro virus in Word docs
3. Code Red (2001): Exploited IIS web server
4. Slammer (2003): Fast-spreading SQL Server worm
5. WannaCry (2017): Ransomware worm
Prevention & Protection
1. Antivirus software: Install and keep updated
2. Firewalls: Block unauthorized network access
3. Regular updates: OS and application patches
4. User education: Don't open suspicious attachments
5. Backups: Regular data backups (air-gapped)
6. Least privilege: Don't use admin accounts for daily tasks
7. Disable macros: In office documents when possible
Removal
1. Boot into safe mode
2. Run antivirus scans
3. Use removal tools from reputable sources
4. Restore from clean backup if needed
5. In severe cases, reformat and reinstall OS
Legal Aspects
Creating/distributing viruses is illegal in most jurisdictions
Can result in heavy fines and imprisonment
Victims may sue for damages
Difference Between Related Threats
Worms: Self-replicate without host files
Trojans: Disguised as legitimate software
Ransomware: Encrypts files for ransom
Spyware: Secretly monitors user activity