VIRUS
VIRUS
BIOLOGICAL VIRUSES
COMPUTER VIRUSES
Traditional computer viruses were first widely seen in the late 1980s
Viruses took advantage of these three facts to create the first self-
replicating programs!
FIRST FACTOR
Spread of personal computers
SECOND FACTOR
Use of computer "bulletin boards"
THIRD FACTOR
The floppy disk
CLASSES OF VIRUSES
2. BOOT-SECTOR VIRUSES
a. Load viruses into memory
b. Infect the boot sector on floppy disks and hard disks
3. MACRO VIRUSES
a. Infects data files
b. Executed in embedded scripts
c. Inserts copies of itself into other documents
d. Spreads by sharing data files
CLASSES OF VIRUSES
• Traditional Viruses
• pieces of code attached to a legitimate program
• run when the legitimate program gets executed
• loads itself into memory and looks around to see if it can find any
other programs on the disk.
Boot Sector Viruses
• Traditional Virus
• infect the boot sector on floppy disks and hard disks
• By putting its code in the boot sector, a virus can guarantee it gets
executed
• load itself into memory immediately, and it is able to run whenever the
computer is on
Zombies
• Updates
• Anti-Viruses
• More secure operating systems
e.g. UNIX
Typical things that some current Personal Computer
(PC) viruses do
• Display message
• Erase files
• Scramble data on a hard disk
• Cause erratic screen behavior
• Halt the PC
• Many viruses do nothing obvious at all except spread!
ORIGINS
ANTIVIRUS PROGRAMS
- VirusScan (McAfee)
- Avast Antivirus
1 I-Worm.Klez 96.49%
2 Win95.CIH 0.84%
3 I-Worm.BadtransII 0.52%
4 I-Worm.Hybris 0.30%
5 Trojan.PSW.Delf 0.24%
6 I-Worm.Sircam 0.21%
7 Win32.Elkern.c 0.16%
8 Macro.Word.Cap 0.13%
9 Win32.FunLove 0.09%
10 I-Worm.Magistr 0.07%
STATISTICS
0-100
101-1000
1001-10,000
10,001-100,000
100,001+
The End