| Computer
Virus
What
is a virus?
A computer virus is a piece of software that has been written to
secretly enter your computer system and "infect" your
files. Some viruses are benign and won't harm your system, while
others are destructive and can damage or destroy your data. There
are currently more than 50,000 known Computer Viruses, with more
than 250 new ones each month.
Typically
a computer virus will replicate itself and try to infect as many
files and systems as possible. If your system is infected, when
you save a file to a disk you will probably infect the disk, and
in turn whoever uses that disk will infect their system. As you
can see, it's a vicious cycle, not unlike the viruses that plague
humans.
New
computer viruses are being written all the time, and it's important
to understand how your system can be exposed to them, and what you
can do to protect your computer.
How
you get infected
Viruses can be written into almost any type of file, so it's important
to be aware of this when you add software to your system. There
are known instances of viruses being accidentally included in licensed,
shrink-wrapped software, but generally you are safe when installing
legally purchased software that you've obtained through normal channels.
The
two main ways viruses enter your system are through files added
to your system from floppy disks (or other removable media like
"Zip disks") and from downloading from the Internet or
private bulletin boards. You can also get a virus through an e-mail
attachment, but not from a plain text e-mail message
alone.
A
common myth regarding viruses is that they can only be passed into
your system through executable program files, or files that are
actually programs, not just data. You'd also think, then, that infection
couldn't take place unless the program holding the virus is launched.
With the advent of "macro" viruses, though, this distinction
is getting blurred. Macro viruses can exist inside any document
whose application uses a macro language, such as the "Concept"
virus passed in Microsoft Word documents. In this case, a user can
have a clean version of Microsoft Word and simply open an infected
Word document, which will then infect the application.
How
to check for viruses
Some common symptoms that could indicate your system's been infected
are:
- Unusual
messages or displays on your monitor
- Unusual
sounds or music played at random times
- Your system
has less available memory than it should
- A disk
or volume name has been changed
- Programs
or files are suddenly missing
- Unknown
programs or files have been created
- Some of
your files become corrupted or suddenly don't work properly
There
are several programs (called virus protection software, antivirus
software, or virus checks) that will check your system for known
viruses, scan incoming files, and warn you before any infected files
are let in. An important fact about these programs is that they
are only as good as their database of known viruses. Since new and
different viruses are being introduced all the time, antivirus databases
need to be updated often.
If
you have a system that is not currently running virus protection
software, the first thing you should do is install one of these
programs and have it scan your hard drive. It will identify any
files that have been infected by any virus it recognizes and offer
you the option to repair the file if it can. In some cases infected
files can be "cleaned" by your virus protection software;
in others, the files will have to be discarded.
Once
you have determined that all the files in your system are virus-free,
this would be a good time to do a complete back-up of your system.
Back-up will be a future topic of The
Tip Sheet. If you get infected in the future, you
will really appreciate having clean copies of your files.
How
to protect your system from viruses
Once you've scanned your system for viruses and determined it to
be clean, it's a good idea to put in place procedures to protect
your system. The number one thing to do-- be careful whenever you're
installing software or downloading files.
Most
antivirus software can be set to scan all floppy disks inserted
in your system and to scan files that are downloaded to your system,
including e-mail attachments. I highly recommended that you set
up your software to do this. This is the most important thing you
can do to protect your system. It's also extremely important to
keep your antivirus software current, and you should check regularly
with your virus program's manufacturer for updates to their product.
This can usually be done at the manufacturer's website.
What
to do if you have a virus
If you have installed virus protection software and it has detected
a virus in your system, first try to get the software to "clean"
or "disinfect" the files. If this doesn't work, you'll
most likely have to delete these files from your system.
In
extreme cases, it may be necessary to reformat your hard drive,
destroying all of the data on it. Then you'll have to reinstall
your software and data, assuming you have the original software
disks and clean backups of your files. In this case, it's a good
idea to install your virus protection software first on the empty
hard drive, so that the integrity of your backup files and original
software can be verified.
You
might also want to contact all the people that you've recently (or
at any time) exchanged information with-- via floppy disks, e-mail
attachments, Zip disks-- and let them know your system's been infected
and theirs may be infected as well. You'd want to advise them to
check their system for the appropriate virus or symptoms.
Types
of Viruses
Computer viruses are categorized into four main types: boot sector,
file or program, macro, and multipartite viruses.
- Boot sector
viruses are usually transmitted when an infected floppy disk
is left in the drive and the system is rebooted. The virus is
read from the infected boot sector of the floppy disk and written
to the master boot record of the system's hard drive. The master
boot sector is the first place your system reads from when booting
up from the hard drive. Then, whenever the computer is booted
up, the virus will be loaded into the system's memory.
- Program
or file viruses are pieces of viral code that attach themselves
to executable programs. Once the infected program is run, the
virus is transferred to your system's memory and may replicate
itself further.
- Macro viruses
are currently the most commonly found viruses. They infect files
run by applications that use macro languages, like Microsoft
Word or Excel. The virus looks like a macro in the file, and
when the file is opened, the virus can execute commands understood
by the application's macro language.
- Multipartite
viruses have characteristics of both boot sector viruses and
file viruses. They may start out in the boot sector and spread
to applications, or vice versa.
Where
to get Virus Scanners........(Purchase)
There are several very good Virus Programs (Scanners) available.
Most all are Trial-Ware, meaning you can download the program and
try it out, usually for 30 days, then if you like it, you can purchase
the program. The costs are generally around $39.00 or less for a
yearly subscription. What this subscription (and initial purchase)
gets you, are updated "Virus Definitions", that you download
from the Manufacturer's site. It's usually a good idea to update
the "Virus Definitions" once a week, but I recommend updating
the "Definitions" daily, especially if you download programs
and files from the Internet.
Here
are some Links to Retail Virus Scanners, (Don't worry, I also have
a couple of FREE ones for you.) just click on the links to go straight
to the sites.
Norton
AntiVirus
This is the Program I recommend if you're going to purchase one.
McAfee
ViruScan Another well know Program.
Where
to get a FREE Virus
Scanner
Avast
Antivirus
This is the program I am currently using. I have tested it extensively
for 3 months and found it to be better than AVG (if that's possible).
It is a little more complicated as far as setting it up, but, if
you follow the directions, you should have no trouble installing
it and adjusting it to your needs.
Unlike AVG, Avast is self updating; as long as you are logged on
to your I.S.P. (internet service provider), it will update automatically.
It scans your email before it is completely downloaded to your in-box
and catches viruses before you have a chance to see them. You are
given a choice as to what to do with the virus. I would strongly
suggest that you allow Avast to either delete it from your system
or, at the very least, have it quarantined.
AVG
Antivirus This is totally free, no strings attached, no-one
will send you e-mail asking you to buy something. Just click on
the link and follow the instructions.
I have used this program for 3 years.It is an excellent Antivirus
program. I download a lot of Programs and files from the Internet,
and haven't been bitten yet. Have I ever received a Virus? Yes,
but AVG Antivirus intercepted the Virus, before it could infect
my system. This program detected a virus on a web page I was looking
at, where the retail program (Norton) did not.
Update
AVG
released version 7 of its Antivirus program in
December of 2004. If you are still using version 6, you will not
be able to receive updated definitions. Go to the AVG
Website to download the newest Version 7.
If
you have any problems downloading, installing, etc. e-mail
me and I'll try to walk you through it. |