Computer virus and worms :Computer virus and worms Virus and worms by:- Hemant kain
Important point :Important point INTRODUCTION OF COMPUTER VIRUS AND WORMS
TYPES OF COMPUTER VIRUS AND WORMS
VIRUS RESOURCES
SOME MOBILE VIRUSES
HOW TO PROTECT FROM VIRUS? Virus and worms by:- Hemant kain
Important point :Important point DIFFERENT TYPE OF ANTI-VIRUS
SOME VIRUS REMOVAL TOOLS
SOME INFORMATION SOURCES Virus and worms by:- Hemant kain
Slide 4:What is computer virus?
Virus (computer), a self-duplicating computer program that spreads from computer to computer, interfering with data and software.
A simple virus that can make a copy of itself over and over again is relatively easy to produce.
Computer viruses are called viruses because they share some of the traits of biological viruses. Just as biological viruses infect people, spreading from person to person similarly computer viruses infect one computer system to other. Virus and worms by:- Hemant kain
Slide 5:What is virus?
Viruses have become a serious problem in recent years.
Currently, more than 30,000 known virus programs exist and an estimated three new virus programs are discovered each day. Virus and worms by:- Hemant kain
Slide 6:What is Worms?
A computer worm is a self-contained program that is able to spread functional copies of itself to other computer systems.
The worm cannot attach itself to other programs.
It uses a network to send copies of itself to other nodes (computers on the network) and it may do so without any user knowledge. Virus and worms by:- Hemant kain
Slide 7:What is Worms?
It might delete files on a host system (e.g., the ExploreZip worm), or send documents via e-mail without any user knowledge.
Unlike a virus, it does not need to attach itself to an existing program. Worms always harm the network , whereas viruses always infect or corrupt files on a targeted computer. Virus and worms by:- Hemant kain
Slide 8:Effect of virus and worms
The computer runs slower than usual.
The computer stops responding, or it locks up frequently.
The computer crashes, and then it restarts every few minutes.
Applications on the computer do not work correctly.
Disks or disk drives are inaccessible.
You cannot print items correctly. Virus and worms by:- Hemant kain
Slide 9:Effect of virus and worms
You see unusual error messages.
It disable system folder option, task manager, deriver manager, Registry Editor, Command Prompt and etc.
New icons appear on the desktop that you did not put there, or the icons are not associated with any recently installed programs.
Strange sounds from the speakers unexpectedly.
The Oprah Winfrey Virus shrinks your 300mb hard drive to 100mb, then slowly expands it, to restabilize around 200mb. Virus and worms by:- Hemant kain
Slide 10:TYPES OF COMPUTER VIRUS AND WORMS
Nonresident viruses
Resident viruses
Boot sector infectors (Polyboot.B, AntiEXE.)
System infectors(Randex, CMJ)
Application program infectors
Macros(Relax, Melissa.A, Bablas)
Directory Virus
Polymorphic Virus(Elkern, Marburg, Satan Bug)
Worms(PSWBugbear.B) Virus and worms by:- Hemant kain
Slide 11:TYPES OF COMPUTER VIRUS AND WORMS
General on the basis of virus information
Discovery Date:
Origin:
Length:
Type:
Subtypes:
Risk Assessment:
Category: Virus and worms by:- Hemant kain
Slide 12:Nonresident viruses
Immediately search for other hosts that can be infected, infect these targets, and finally transfer control to the application program they infected.
Nonresident viruses can be thought of as consisting of a finder module and a replication module. The finder module is responsible for finding new files to infect. For each new executable file the finder module encounters, it calls the replication module to infect that file. Virus and worms by:- Hemant kain
Slide 13:Resident viruses
Resident viruses do not search for hosts when they are started. Instead, a resident virus loads itself into memory on execution and transfers control to the host program.
The virus stays active in the background and infects new hosts when those files are accessed by other programs or the operating system itself. Resident viruses contain a replication module that is similar to the one that is employed by nonresident viruses. Virus and worms by:- Hemant kain
Slide 14:Host
Binary executable files (such as COM files and EXE files in MS-DOS, Portable Executable files in Microsoft Windows, and ELF files in Linux)
General-purpose script files (such as batch files in MS-DOS and Microsoft Windows, VBScript files, and shell script files on Unix-like platforms).
Application-specific script files (such as Telix-scripts) Documents that can contain macros (such as Microsoft Word documents, Microsoft Excel spreadsheets, AmiPro documents, and Microsoft Access database files). Virus and worms by:- Hemant kain
Slide 15:Virus sources
Viruses are written everywhere in the world.
All computer viruses are manmade.
Viruses don not just appear, there is always somebody who has made it and they have own reason to so.
There are many reasons behind to make a computer virus.
The first reason involves bragging rights, or the thrill of doing it. Virus and worms by:- Hemant kain
Slide 16:Virus sources
ii. Some of them make computer virus for take revenge and release their anger
iii. Some of them make computer virus for profit earning from virus and antivirus marketing.
A ROGUE PROGRAMMERS makes computer virus for making hole in any company security and they want to steal some data from that company. Virus and worms by:- Hemant kain
Slide 17:Virus language
Basically any language that works on the system that is the target
ANSI COBOL,
Java
C/C++,
Pascal,
VB,
UNIX Shell
JavaScript, Virus and worms by:- Hemant kain
Slide 18:History
Traditional computer viruses were first widely seen in the late 1980s, and they came about because of several factors.
First worm released on the Internet was called Morris worm, it was released on Nov 2, 1988.
March 1999, the Melissa worms was so powerful that it forced Microsoft and a number of other very large companies to completely turn off their e-mail systems until the virus could be contained. Virus and worms by:- Hemant kain
Slide 19:History
The ILOVEYOU virus in 2000 had a similarly devastating effect. Over a five-hour period the worm spread across Asia, Europe and the United States via e-mail messages titled "ILOVEYOU".
It generally uses Microsoft's Outlook e-mail program. A message is sent to a user with the subject line "ILOVEYOU" and an attachment named "LOVE-LETTER-FOR-YOU.TXT.vbs." If a user opens the attachment, which contains the malicious code, the worm uses the recipient's Outlook address book to send a copy to everyone listed. Virus and worms by:- Hemant kain
Slide 20:How to protect from virus
There are lots of viruses in the world and new viruses are coming up every day.
It is good to be aware of viruses and other malware and it is cheaper to protect you environment from them rather than being sorry.
No completely effective methods exist to ensure that a computer or network is safe from computer viruses. You can take precautions, however, to protect your home and work computers from virus infections. In addition there is a variety of software available to combat computer viruses. Virus and worms by:- Hemant kain
Slide 21:How to protect from virus
Best way to protect yourself is to prepare your computer against viruses in advance.
One way to protect you computer is to use updated anti-virus program.
When you get an email attachment, you should first check the attachment by scaning the file with anti-virus program. Virus and worms by:- Hemant kain
Slide 22:How to protect from virus
Scan pendrive before opening it.
zipped and delivered as an executable.
Stick with commercial software purchased on CDs because usually download software by internet contain virus.
Never run executables files from e-mail.
Users need to be wary of opening unexpected email, and should not run attached files or programs, or visit web sites that are linked to such emails. Virus and worms by:- Hemant kain
Slide 23:Mobile virus
The first instance of a mobile virus occurred in June 2004 when it was discovered that a company called Ojam had engineered an anti-piracy Trojan virus in older versions of their mobile phone game Mosquito. This virus sent SMS text messages to the company without the user's knowledge. In July 2004, computer hobbyists released a proof-of-concept mobile virus named Cabir. This virus replicates itself on Bluetooth wireless networks Virus and worms by:- Hemant kain
Slide 24:Mobile virus
1) Cabir: Infects mobile phones running on Symbian OS. When a phone is infected, the message 'Caribe' is displayed on the phone's display and is displayed every time the phone is turned on. The worm then attempts to spread to other phones in the area using wireless Bluetooth signals.
2) Duts: A parasitic file infector virus and is the first known virus for the PocketPC platform. It attempts to infect all EXE files in the current directory (infects files that are bigger than 4096 bytes). Virus and worms by:- Hemant kain
Slide 25:Mobile virus
3) Skulls: A Trojan horse piece of code. Once downloaded, the virus, called Skulls, replaces all phone desktop icons with images of a skull. It also will render all phone applications, including SMSes and MMSes useless
4) Commwarrior: First worm to use MMS messages in order to spread to other devices. Can spread through Bluetooth as well. The executable worm file once launched hunts for accessible Bluetooth devices and sends the infected files under a random name to various devices. Virus and worms by:- Hemant kain
Anti-virus :Anti-virus Antivirus (or anti-virus) software is used to prevent, detect, and remove malware, including computer viruses, worms, and trojan horses. Such programs may also prevent and remove adware, spyware, and other forms of malware.
Before Internet connectivity was widespread, viruses were typically spread by infected floppy disks. Virus and worms by:- Hemant kain
Anti-virus :Anti-virus When antivirus software scans a file for viruses, it checks the contents of a file against a dictionary of virus signatures. A virus signature is the viral code. If a virus signature is found in a file the antivirus software can resort to some combination of quarantine, repair or deletion. Virus and worms by:- Hemant kain
Anti-virus :Anti-virus Because new viruses are being created each day, the signature-based detection approach requires frequent updates of the virus signature dictionary. To assist the antivirus software companies, the software may allow the user to upload new viruses or variants to the company, allowing the virus to be analyzed and the signature added to the dictionary. Virus and worms by:- Hemant kain
Anti-virus :Anti-virus Data Fellows F-Prot
IBM Antivirus
ESaSS ThunderBYTE
McAfee Scan
Symantec Norton Antivirus
kaspersky
Bit Defender 2009
Webroot antivirus
AVG antivirus
Alwil Software Avast Home Edition Virus and worms by:- Hemant kain
Virus removal tools :Virus removal tools Actually this tools are not like antivirus. These are made to remove only some virus. like
Smart virus remover
This virus remover can remove 30 most popular virus like newfolder.exe, Trojan.Win32.Agent, all autorun virus, system.exe and many more This product also removes the problems that are caused by these viruses . Some of the effects is Removed by this product are disabling of Task Manager, Registry Editor, Command Prompt, Folder Options reg and Folder Options show Hidden files and Folders Problem. Virus and worms by:- Hemant kain
Virus removal tools :Virus removal tools 2) McAfee Avert Stinger
3) Bugbear Removal Tools
4) Trojan.Qhosts Removal Tool Virus and worms by:- Hemant kain
INFORMATION SOURCE :INFORMATION SOURCE www.howstuffworks.com/virus.htm :-This site offers an explanation of computer virus how they function , protection information , virus origin ,history, and evolution.
http://vmyths.com:- This commercial site offers news , information , article, and resources on computer virus myths and hoaxes. Virus and worms by:- Hemant kain
INFORMATION SOURCE :INFORMATION SOURCE home.mcafee.com/VirusInfo/Default.aspx:-This site give many information just like recently discover virus , there risk either it has low, medium or high risk, date of discover, type of the virus , virus characteristics , removal instructions , method of infection and many software for virus removal.
virusall.com/computer%20worms/worms.php:-This site give information about viruses , hoaxes, worms and spyware activity Virus and worms by:- Hemant kain
Last words :Last words There are lots of viruses in the world and new viruses are coming up every day. There are new anti-virus programs and techniques developed too. There is no antivirus which fully protect your computer so It is good to be aware of viruses and other malware and it is cheaper to protect you environment from them rather then being sorry. There might be a virus in your computer if it starts acting differently. There is no reason to panic if the computer virus is found. Virus and worms by:- Hemant kain
Any Question ? :Any Question ? Thank you Virus and worms by:- Hemant kain