Computer viruses: types, damage, and prevention strategies

¶ … computer virus is among the greatest enemy of computer technology's globalization. In just a few split of seconds, it can turn our endeavor of automating our diverse activities into a nightmare. This is especially a catastrophe to businesses whose operation at a large percentage depends on computerized data access and retrieval. Globally, computerization is the trend among businesses. Thus, the damage that computer viruses can cause is a global threat and problem to the stabilization and progress of businesses and economy.

There are many types of computer virus. Almost everyday, a new computer virus is created. Since the emergence of computer networks, such as LAN, WAN, and the Internet, there has been quite a number instance where a computer virus had infected and brought damage to a great amount of information and data globally. As a consequence, many businesses are paralyzed when a computer virus attacks.

Purpose

This paper aims to provide useful information about computer viruses. By exploring the different types of a computer virus, the different existing viruses classified in each type, and the damage each virus can do to system data and files, this paper aims to provide the necessary and possible prevention tools and techniques to avoid the risks a computer virus can bring. It aims to provide a well researched and well presented report that draws clear conclusions and offers solid recommendations about the ways to handle virus threat.

1.2 Sources

The sources that will be used in this research paper will come from online literatures, journals, and recent researches and studies. These sources, especially the use of the Internet, are ideally beneficial for this research paper because of the wide-range of information that they generally provide.

This research paper will gather essential information pertaining to computer viruses and integrate them into a useful reading material and reference.

1.3 Authorization

For future recommendation of anti-virus softwares, it is essential that the user will obtain a licensed and authorized copy of the software. Basically, in this research study, the only subject that needs authorization is the use of legal copies of software.

2. Conclusion

Computer viruses are threats to computer systems and data. The usual purpose why viruses are being created is to maliciously damage computer systems and data. Those that are in greater risk of being attacked by a computer virus are computer systems that are connected to a network. This includes the LAN, WAN, and the Internet connections. To prevent from being infected by a computer virus, it is a critical standard operating procedure to implement anti-virus softwares. It is essential to provide computer systems with effective security tools that block viruses from infecting computers. Moreover, having the knowledge on the different viruses that exist and the corresponding ways to handle them is important.

3. Recommendation

Pertaining to the computer systems that are connected to a network, may it be a LAN, WAN, or the Internet, this research recommends that any computer connected to a network be equipped with anti-virus software and network security systems. In the growing demand of being connected to a network, these simple preventions are important to prevent the risk of becoming victims of holes in technology. On the other hand, pertaining to future researches that will be conducted on computer viruses, it is recommended that a list of further viruses as well as the necessary techniques to prevent or solve the problems they may cause be provided to the readers. This is important since almost everyday new computer viruses emerge.

4. Threats to Local Area Networks (LAN)

There are different types of threats to local area networks. Some of which are threats on the existence of computer data itself while some are threats on the security of computer systems across a network. An example of data threats are computer viruses, worms, and Trojan horses, while an example of threats on computer systems' security are the crackers. Following is a discussion of these types of threats to local area networks.

Computer Viruses

What is a computer virus? Mark K. Brouwer, in his Virus or Hoax? online, defines a computer virus as program which reproduces its own code by attaching itself to other programs in such a way that the virus code is executed when the infected program is executed.

A they have an infection phase where they reproduce widely, and an attack phase where they do whatever damage they are programmed to do.

Boot Sector

Before discussing what a boot sector virus is, it is important to have an overview of what a boot sector is. A boot sector functions as a library of the corresponding locations of each data. In a floppy disk or hard drive, data are basically spread on segments at different locations. To access data would require a disk to first locate for the boot sector so that it will know the exact location of the data being accessed.

Now, what a boot sector virus does is to damage and destroy the information in the library of locations of data - the boot sector. When this virus infects a boot sector, it puts the boot sector at a loss, making it incapable of identifying the exact location of data. Consequently, this can also impair an entire operation. A few examples of a boot sector virus are Michaelangelo, the Form, and Junkie Virus (Mehta, 2001).

File-Infecting

The main action that a file-infecting virus does is to modify and damage files. This kind of virus, which is a common type of computer virus, usually attacks executable files such as.EXE and.COM files. By attaching codes to a file, or by modifying the original code of a file, it is possible that a file can no longer be executable.

Other file-infecting virus attaches itself on executable files. When the infected executable is run, the virus triggers itself to attach on other executable files. Examples of file-infecting virus are Nemesis, Friday the 13th, and Enigma (Mehta, 2001).

As its name implies, email viruses are those that infect emails. However, they do not actually infect the message in the email itself. Such type of virus are embedded on files attached to an email. By downloading and opening a file that is infected with a virus, the virus will be triggered. One example of an email virus that has caused a lot of computer problems around the world is the I LOVE YOU virus. It is a WIN-32-based e-mail attachment written in VB script that disguised in the form of a love letter (Schmugar, 2000).

Macro macro virus is a type of virus, written in macro, which embeds itself to document files. This virus infects documents that were created in applications that support macro languages. It can also infect the applications supporting macro. This includes Microsoft Word, Excel, etc. Webopedia indicates that 75% of today's computer viruses are macro viruses (Webopedia, 2004).

Trojan Horses

Trojan horse is not virus. However, it is capable of destroying pertinent information and data in a hard disk. Unlike a virus that spreads to files and boot sector, a Trojan horse is simple a program that performs malicious actions. Usually, a Trojan horse program hides itself in the form of valid applications and programs. When such program is executed, the Trojan horse performs its objective of destroying data in your computer. Some examples of Trojan horses are Darth Vader, the Aids Information, and Twelve Tricks A and B (Mehta, 2001).

Hackers and Crackers

Aside from the computer viruses, worms, and Trojan horses that has the capability of destroying important data and information in computer systems, another problem that the world of the Internet and other network connections currently face is the existence of hackers and crackers.

4.4.1 Hackers

Hackers are often misidentified as those who perpetrates the offenses committed by the crackers. According to Mark Adams, the crackers give hackers a bad name. Adams (1999) indicates that hacking is a noble activity. The term originated during those times when computers are just starting to emerge in educational institutions and that there are not much manual for students to use (Adams, 1999). Hence, the students prepared bits of codes that they can use for their programs. Adams suggests that the following as referring to hacking.

A refers to a clever, benign, and "ethical" prank or practical joke, which is both challenging for the perpetrators and amusing to the user community. Hacking is viewed as a noble activity to satisfy one's curiosity and educate oneself on a complex piece of hardware or software. It's all about learning, not destruction.

4.4.2 Crackers

Nowadays, the Internet is a very important innovation that connects diverse organizations and businesses around the globe. The Internet now serves diverse purposes, the most common of which is that it is used as a medium in the transfer of important data and information. One particular type of industry that greatly uses the Internet is e-commerce. With all the information that travels across the Internet, there is a high risk for malicious computer users will try to intercept and capture such information. These malicious computer users, in our technical world, are most commonly known as crackers.

In layman's terms, crackers are like thieves. They try to connect to networks, or try to retrieve information, where they are not legally authorized to have access. Usually, their intention is to get pertinent data or information that they can use in other malicious activities. For instance, in e-commerce sites, credit card information is prone to being cracked.

Securing Networks Systematically

Customizing Software

Customizing a software entails a well-organized and detailed plan and structure of program flow. This method prevents the risk of having holes in the software where unwanted elements, such as data intrusion caused by crackers, can cross in. Moreover, when customizing a software, such as an application for an e-commerce site, it is important to equip the application with software that verifies the integrity of user information. An example of such software is the VeriSign. Also, turning off features that poses vulnerabilities to the application is essential. Cert Coordinator Center lists the following important steps to follow when customizing software.

A eliminate services that are unneeded and insecurely configured restrict access to vulnerable files and directories turn off software "features" that introduce vulnerabilities mitigate vulnerabilities that intruders can use to break into systems

Harden and Secure the Network

One way of securing a network is by implementing network firewalls and security applications. Such applications provide a network with the necessary security that the network data and network users need.

Prepare

Due to the continuous emergence of threats to networks, there is always no 100% assurance that networks can be free from viruses or data thefts. Hence, to anticipate emergency cases where networks became vulnerable, it is always important to have different plans that can solve network problems. Perhaps, one of the most important procedure that must be accomplish to save an organization from problems caused by network vulnerabilities is to always keep a backup of important files and data.

Detect

This phase is almost similar to equipping a network with firewalls and security applications. The only difference is that this phase involves the implementation of detection software, such as anti-virus software, to provide a network with a warning device against malicious activities.

Respond

An immediate response to network vulnerabilities is important. For instance, when a computer system that is connected to a network gets infected by a virus, it is essential to immediately render the necessary actions to prevent the virus from spreading to other computer systems. In this phase, the emergency plans that were mentioned and were developed in phase 4.5.3 (Prepare) would be useful. Cert Coordinator Center lists the following essential Respond steps to follow.

A analyze the damage caused by the intrusion and respond by adding new technology or procedures to combat it monitor an intruder's actions in order to discover all access paths and entry points before acting to restrict intruder access.

A eliminate future intruder access return the system to a known, operational state while continuing to monitor and analyze

Improve the System network system should not be stagnant with its features. Since there is a continuous development of different threats to a network, there must also be a continuous effort in developing and finding methods to prevent and stop network vulnerabilities. Cert Coordinator Center lists the following essential steps in improving a system.

A hold a post-mortem review meeting to discuss lessons learned update policies and procedures select new tools collect data about the resources required to deal with the intrusion and document the damage it caused

Repeat the Cycle of Steps

Repeating this cycle of steps is a must to maintain the security of a network.