Computer Virus and Firewalls
Essay Preview: Computer Virus and Firewalls
Report this essay
Computer Virus and Firewalls
What is a computer virus? A computer virus is a computer program that can copy itself and infect your computer. A virus can spread from one computer to another when its host is taken to the target computer, example if a user sent a infected document over the network or Internet or on removable medium like a CD or Flash drive. Viruses increase their chances of spreading to other computers by infection files on the network file system. Virus can be defined as a set of computer instructions that reproduces itself and it may attach to other executable codes. This code is usually short programs that may either be embedded in other codes or stand on its own. This computer program is designed to infect some aspect of the host computer and then copy itself as much and as often as possible. Its estimated that there are tens of thousands of worms and viruses being spread via the internet and new ones being discovered every day. Most are spread in normal internet activities that are widely used everyday like the sharing of music files, photos, and others such files.
What does a virus do? Not all viruses are always destructive like deleting files or causing your hard drive to crash. A lot of viruses today are more interested in harvesting information from your computer and using it for sending spam or other illegal purposes. Past virus were used to do damage just for the sake of destruction or just to be able to brag about it to peers. Today viruses are widespread and have a root in an economic agenda.
How are virus spreads? The intention of computer viruses is to get it installed in a computer so it can spread itself. This can happen through exposure when computer defenses are down or nonexistent. A virus can spread rapidly and are not easily removed. Virus operates stealthy, coupled with rapid communications that happen between computers today; its easy to increase the speed that a virus can move around the web and the world. A virus that goes after a network computer can be easily spread since computers are connected and have some vulnerability and access to each other. Viruses will often spread through shared folder, such as emails or other media. Because there are so many types of computer viruses, a virus can infect another computer unintentionally at anytime that a program is running and the virus is activated. Opening a e-mail attachment, downloading a file from the internet, or receiving a copy of a program or file off a flash drive can expose your computer to a virus. The most common way that a virus is spread is e-mail attachments or the use of transfer files using instant messaging.
Viruses are classified as nonresident or resident. The nonresident viruses consist of a finder module and replication module. With the finder module finding new executable files to infect and the replication module infects the file. The resident viruses have replication modules that are similar to the nonresident, but not called by the finder module. The virus loads the replication module into memory when its executed to ensure that the module is executed each time the operating system carries out certain operations.
There are six broad categories or types of viruses.
Boot Sector Viruses: Are viruses that aim at the boot sector of a hard drive and infect a crucial component of the boot process. The boot sector holds the critical information that controls the hard drive and part of the operating program that is in charge of the whole boot process. These types of viruses load into the system memory while the boot cycle is starting. This virus doesnt affect files, it goes after the drive itself where the virus is saved and this is part of the reason that is no longer as big a threat as it used to be. Since the advent of CDs and DVDs and the drives that carry them its not possible to infect programs that carry them. With floppy drives the virus could spread quickly from computer to computer by the disks but CDs and DVDs cant be infected this virus cant be spread that way. Another reason the boot sector virus is less common is because the operating systems stand guard over the boot sector and make it hard for the virus to have effect. Some examples of a Boot virus are Form, Disk Killer, Michelangelo, and Stone virus.
File Virus: Are coded so that they will attach themselves to exe. Files, compressed files like zip files and driver files. They are set into action when a program that they are attached to is started. After the virus is set into motion it will attach itself to other programs and system files to start along its intended path that it was written for. You see it as a two prong approach; the first depending on the type of virus will duplicate and go about its intended mission. It will search through programs in the system and find a place to infect with the code then it will activate when that program is ran the next time. It will duplicate itself over the computer and any computer that is attached to the original system. This virus often harbors a special code that causes it to be activated when certain events take place. A lot of the time its a date or some other easily defined trigger event on any computer system. The majorities of viruses are file viruses and can be classified depending on the actions that they carry out.
Multipartite Viruses: Are the types of computer viruses that are both a file virus and a boot sector virus. They enter the computer though a various sort of media and embed themselves in the system memory. Then they go into the hard drive and infect the boot sector. When they are installed in the boot sector these types of virus infect executable files and spreads itself in the system. This virus isnt seen much anymore at one time this virus was responsible for many infections because it combined the characteristics of two viruses in one.
Network Viruses: Are especially made for networks and are uniquely created to quickly spread throughout the local area network and generally across the internet. It moves within shared resources like drives and folders. When it finds entry into a system it will search for a vulnerable computer on the network and infect that system, and do it again and again to any vulnerable system.
E-Mail Viruses: Are usually macro virus and will multiply itself by seeking out the other contacts in an e-mail address book and send itself to all the addresses so they will activate the virus too. This way it is spread over and over again. Sometimes this virus can spread by only previewing it in the mail client. Some of these viruses are destructive too.
Macro Viruses: Is a new type of computer virus that infects the macros within a document or template. The most common