How Does A Virus Spread

"I love your site and your Tourbus Newsletter! I would like to know how a virus propagates over a network? If you get a virus on one computer - do other users on the network have to do anything to get infected? Is there a good way to protect against this?"

Great question! There are several ways for a virus to spread from one computer to another. Let's look at those, and ways to prevent the propagation of pestiferous programs.

Careful With That Paperclip...

The most common is via an email attachment. I'm not aware of any current exposures in popular email software that allow a virus to spread simply by opening or reading an email.

But plenty of people are still willing to open anything that pops into their inbox. Opening an attachment without verifying its contents with the sender is asking for trouble. Never run a program that you save to disk from an email attachment without anti-virus protection in place. The same goes for Word documents, which can have viruses in embedded macros.

Dubious Downloads

Another common way for a virus or spyware to spread is by piggybacking on other software that you download. If you just can't resist the latest toolbar, file-sharing gizmo, coupon dispenser or email enhancer, you may be at risk. Often these and other downloads come with malware, free of charge. Running a good anti-spyware program will reduce your risk.

Just Click NO!

Ever been to a website and gotten one of those "Click here to install and run {Whatever}" popups? Just click NO! Unless you know for sure that you need to press OK (such as when downloading security updates from Microsoft) then treat these popups as threats to your computer.

Sometimes It's NOT Nice to Share

If you are on a network, and you allow your hard drive to be shared (enabling other network users to read and write your files) then you are WIDE OPEN to the stupidity of the other users on the network. If any one of them got a virus, there's nothing to prevent it from copying itself to your computer via the network share. Unless you absolutely have to share your hard disk, don't. You can check to see if you have enabled sharing by right clicking on the drive icon in My Computer, then select Sharing.

The SneakerNet Menace

And don't forget portable media, such as floppies, CDROMs, and those nifty little flash drives that connect to a USB port. Assume that any file you copy from external media could be infected. Keeping your anti-virus protection enabled and updated should protect you here.

BOB RANKIN... is a tech writer and computer programmer who enjoys exploring the Internet and sharing the fruit of his experience with others. His work has appeared in ComputerWorld, NetGuide, and NY Newsday. Bob is publisher of the Internet TOURBUS newsletter, author of several computer books, and creator of the http://LowfatLinux.com website. Visit Bob Rankin's website for more helpful articles and free tech support.

[tags]virus,anti virus software,virus control,trojan worms,trojan virus,spyware,removing spyware,tech tips[/tags]

Computer Viruses The Nasty Truth

The term, "virus", in computer technology, refers to a self replicating application that spreads by making copies of itself by inserting into other programs, other executables or documents, and when executed begins to perform harmful actions on the system. All computer viruses are deliberately created, not always malicious and some of them may be benign and simply annoying.

Non-Memory Resident and Memory Resident Viruses:

Non-Memory resident viruses, when they are executed, immediately look for other hosts that can be infected. When they infect these targets, they transfer control to the application program they infected. A non-resident virus has a finder module and a replication module. The finder module, once it finds a new file to infect, calls upon the replication module to infect that file.

Memory-Resident virus stays in the memory and do not look for hosts to infect when they are executed. It stays active in the background after its host program is terminated, and infects files as soon as they are opened or accessed by other programs or the operating system. It does have the replication module like the non-memory resident virus, but without the finder module.

Types of Computer Viruses:

File Viruses: These types of viruses are the most common, and mostly infect open files and program libraries on an operating system. The virus functions by inserting itself into a host file, modifies it in such a way that the virus is executed when the file is opened. They are also known as left viruses. Today, there are known viruses infecting all kinds of executables of standard DOS: batch command files (BAT), loadable drivers (SYS, including special purpose files IO.SYS and MS- DOS.SYS) and binary executables (EXE, COM). There are also viruses targeting executables of other operating systems - Windows 3.x, Windows95/NT, OS/2, Macintosh, Unix, including the VxD drivers of Windows 3.x and Windows95.

Macro viruses: Macros are used in most word processing programs such as Microsoft Office in order to automate or simplify recurring tasks in documents. Macro viruses are those viruses that use the application's own macro programming language to distribute themselves, in which an unwanted sequence of actions is performed automatically when the application is started or something else triggers it. These macro viruses may inflict damage to the document or to other computer software but are relatively harmless, and are often spread as an e-mail virus.

Boot Viruses: These were one of the most common viruses prevalent during the early and mid 1990s, when the use of diskettes was popular. These viruses infect or substitute their own code for either the DOS boot sector or the Master Boot Record (MBR), which controls the boot sequence of the PC. The MBR is executed every time a computer is booted so the virus will also be loaded into memory on every startup and spreads to every disk that the system reads. They are typically very difficult to remove, and most antivirus programs cannot clean the MBR while Windows is running. So, bootable antivirus disks are needed to fix boot sector viruses.

Script viruses: They are a division of file viruses, written in a variety of script languages such as VBS, JavaScript, BAT, PHP, HTML etc. They can form a part of multi-component viruses or infect other scripts such as Windows or Linux command and service files. If the file format, such as HTML, allows the execution of scripts, they can infect it.

http://antivirus-hq.com/ Antivirus HQ: your online resource to help protect your PC from viruses and spyware.

[tags]virus, computer, software, viruses, spyware, adware[/tags]