1

Computer Virus
A computer virus is a malware program that, when executed, replicates by inserting copies of
itself (possibly modified) into other computer programs, data files, or the boot sector of the
hard drive; when this replication succeeds, the affected areas are then said to be "infected.
Viruses often perform some type of harmful activity on infected hosts, such as stealing hard
disk space or CPU time, accessing private information, corrupting data, displaying political or
humorous messages on the user's screen, spamming their contacts, or logging their keystrokes.
However, not all viruses carry a destructive payload or attempt to hide themselvesthe
defining characteristic of viruses is that they are self-replicating computer programs which
install themselves without the user's consent.
Virus writers use social engineering and exploit detailed knowledge of security vulnerabilities to
gain access to their hosts' computing resources. The vast majority of viruses target systems
running Microsoft Windows, employing a variety of mechanisms to infect new hosts, and often
using complex anti-detection/stealth strategies to evade antivirus software. Motives for
creating viruses can include seeking profit, desire to send a political message, personal
amusement, to demonstrate that a vulnerability exists in software, for sabotage and denial of
service, or simply because they wish to explore artificial life and evolutionary algorithms.
Computer viruses currently cause billions of dollars worth of economic damage each year, due
to causing systems failure, wasting computer resources, corrupting data, increasing
maintenance costs, etc. In response, free, open-source antivirus tools have been developed,
and a multi-billion dollar industry of antivirus software vendors has cropped up, selling virus
protection to Windows users. Unfortunately, no currently existing antivirus software is able to
catch all computer viruses (especially new ones); computer security researchers are actively
searching for new ways to enable antivirus solutions to more effectively detect emerging
viruses, before they have already become widely distributed.
Different Types of Computer Viruses

In general, computer viruses are classified according to their nature of infection and
behavior. Different types of computer virus classification are given below.
Boot Sector Virus: A Boot Sector Virus infects the first sector of the hard drive, where
the Master Boot Record (MBR) is stored. The Master Boot Record (MBR) stores the
disk's primary partition table and to store bootstrapping instructions which are executed
after the computer's BIOS passes execution to machine code. If a computer is infected
with Boot Sector Virus, when the computer is turned on, the virus launches immediately
and is loaded into memory, enabling it to control the computer.
2

File Deleting Viruses: A File Deleting Virus is designed to delete critical files which are
the part of Operating System or data files.
Mass Mailer Viruses: Mass Mailer Viruses search e-mail programs like MS outlook for
e-mail addresses which are stored in the address book and replicate by e-mailing
themselves to the addresses stored in the address book of the e-mail program.
Macro viruses: Macro viruses are written by using the Macro programming languages
like VBA, which is a feature of MS office package. A macro is a way to automate and
simplify a task that you perform repeatedly in MS office suit (MS Excel, MS word etc).
These macros are usually stored as part of the document or spreadsheet and can travel
to other systems when these files are transferred to another computers.
Polymorphic Viruses: Polymorphic Viruses have the capability to change their
appearance and change their code every time they infect a different system. This helps
the Polymorphic Viruses to hide from anti-virus software.
Armored Viruses: Armored Viruses are type of viruses that are designed and written to
make itself difficult to detect or analyze. An Armored Virus may also have the ability to
protect itself from antivirus programs, making it more difficult to disinfect.
Stealth viruses: Stealth viruses have the capability to hide from operating system or
anti-virus software by making changes to file sizes or directory structure. Stealth viruses
are anti-heuristic nature which helps them to hide from heuristic detection.
Polymorphic Viruses: Polymorphic viruses change their form in order to avoid
detection and disinfection by anti-virus applications. After the work, these types of
viruses try to hide from the anti-virus application by encrypting parts of the virus itself.
This is known as mutation.
Retrovirus: Retrovirus is another type virus which tries to attack and disable the anti-
virus application running on the computer. A retrovirus can be considered anti-antivirus.
Some Retroviruses attack the anti-virus application and stop it from running or some
other destroys the virus definition database.
Multiple Characteristic viruses: Multiple Characteristic viruses have different
characteristics of viruses and have different capabilities.