Saturday, October 17, 2009

Characteristics and Criteria Virus

C. CRITERIA FOR VIRUS

A program called the new virus can be said is really true
If the virus will have at least 5 criteria:

1. The ability of a virus to get information
2. Ability to check a program
3. Ability to multiply and transmit
4. His ability to manipulate the
5. Ability to hide themselves.

Now will try to explain briefly what is meant by each
Each capability is and why it is needed.

1.Ability to obtain information

In general, a virus requires a list of file names contained in
a directory, for what? so that he can identify what programs
Just what will he infect, such as macro viruses that will infect all
extension *. doc files after a virus is found, this is the ability
gather information necessary for the virus that can make a list /
all data files, continue to sort them by looking for files that can be
to infect.Usually created when a program infected / infected
or even a virus program is executed. The virus will soon make
data collection and put it in RAM (usually: P), so that if
computer is turned off all the data lost but will be created each program
virus and usually runs as a hidden file created by the virus.

Suat 2.Ability to check program

A virus must also be can to examine a program that will
infected, for example, he served infect program with extension*. doc, he
must check whether the document files have been infected or not,
because if it is then he will be useless infect 2 times. This is
useful to improve the ability of a virus in terms of speed
infects a file / general program.the generally virus is
have / give a sign to the files / programs that have been infected
so it is easy to recognize by the virus. Sample labeling
is such as to give a unique byte in every file
infected.

3.Ability to multiply
, meaning without this is not a virus.
The core of the virus is the ability multiply itself by infecting
other programs. A virus has been discovered when the victim
(either a file or program) then he will recognize it by check,
if not infected then the virus will start actions to infect
byte by writing the identifier of the program / file, and
so copied / write virus code above object files / programs
infected. Some common ways for viruses to do
infect / reproduce itself are:

a.File / infected program will be deleted or renamed. then
created a file using the name by using the virus
it (meaning the virus had changed his name to the name of the deleted file)
b.Program virus already in the execution / memory load to be directly
infect other files in a way include all files / programs
available.

4.Ability a manipulation

Routine (routine) owned by a virus will be executed after the virus
infect a file / program. the contents of this routine can be varied
starting from the lightest to the destruction. This routine is generally used
to manipulate the program or popularizing the creators! This routine
take advantage of the ability of an operating system (Operating System),
so have the same ability to those of system
operation. example:

a.Make images or messages on the monitor
b. change the label change of each file, directory, or the label of
drive in the pc
c.Manipulation programs / files are infected
d.Destruction programs / files
e.Destruction printer work, etc.

5. Ability to Hiding self

This ability to hide himself possessed by a virus so that all
good job from the beginning to the success of transmission can be accomplished.
the usual steps taken is:

-Original program / virus is stored in the form of machine code and combined with
Other programs that are considered useful by the user.
-Virus program is placed on the Boot Record or rare tracks
considered by the computer itself
-Virus program is made as short as possible, and the results are not infected file
changing size
-The virus does not change the description of time a file
-etc
So now you Know how virus can infected and destruction our computer /program,if you want to know the origin of virus see and read this article

No comments:

Post a Comment