Types of computer viruses

Types of computer viruses

The traditional computer virus classification is according to the infection pattern to differentiate, the following is the various types introduction:

· Boot type

Michelangelo virus, latent for a year, "hard" is to get (this did not read)

· File type

(1) Very standing type

Datacrime II Data Killer-low-order formatted hard drive, highly destructive data

(2) Resident type

Friday 13th Black (13th) Friday-"light" out of the box

· Compound type

Flip Flip-4:00 screen handstand show starts on time

· Stealth aircraft type

FRODO VIRUS (Fu lu multiple virus)-"poison" clock file configuration table

· Thousand Dough gun

Pe_marburg-A global "war game"

· File macros

Taiwan No.1 file macro virus-a big test of mathematical ability

· Trojan Horse virus VS. Computer worm

"ExploreZip Adventure Worm" has "after the boot regeneration", "immediate chain destruction" ability

· Hacker type virus

NIMDA Backdoor, black letters, paralysis Network

Understanding computer viruses and hackers

2.1-Boot virus (boot strap sector Virus):

The boot virus is the first sector that is hidden in a disk slice or hard disk. Because the DOS architecture is designed so that viruses can be loaded into memory every time the operating system is not loaded, this feature allows the virus to be fully controlled for all kinds of interrupts (Interrupt) in DOS and has greater ability to infect and destroy. @ Instance

Michelangelo Michelangelo virus-lurking for a year, "hard" is to be

Date of onset: March 6

Discovery Day: 1991.3

Origin: Sweden (there is also a saying for Taiwan)

Symptom: Michelangelo is a typical boot-type virus, best at hacking the hard disk partition (Partition Table) and boot area (boot sector) of the computer hard disk, and the boot zone (boot sector) of the floppy disk, and it will reside in the memory of the computer system, Try to infect the floppy disk you are using. The path of Michelangelo virus infection, in fact, is only one, that is, the use of improper disk boot, if the disk is infected with Michelangelo, so, whether or not a successful boot, the terrible Michelangelo has taken the opportunity to enter your computer system of the hard disk, usually looks like the computer is quite normal, One to March 6 users on the boot if there is a black screen, that means that the hard disk information has been told you Bye Bye.

Historical significance: File macro virus before its prosperity, for several consecutive years, the most destructive poison king throne

Top

2.2 File type virus (Infector Virus):

File-type viruses are usually parasitic in executable files (such as *.com, *. EXE, etc.). When these files are executed, the virus's program is then executed. Depending on the mode of transmission, the file type virus is divided into two kinds: the very resident type and the resident type.

(1) Very resident virus (Non-memory resident Virus):

Non-resident virus will own parasitic in *.com, *. EXE or *. SYS in the file. When these poisoned programs are executed, they try to infect another or multiple files.

Instance

Datacrime II Data Killer-low-order formatted hard drive, highly destructive data

Onset Date: October 12 to December 31

Discovery Day: 1989.3

Origin: Holland

Symptom: From October 12 to December 31 each year, except Monday DATA CRIME II will be displayed on the screen: *data CRIME II virus*

Then the lower-order format of the hard disk No. 0 Magnetic column (CYLINDER0 from head 0~head 8) format, you will hear the beep a machine, from the collapse.

Historical significance: Although claimed to be a killer, but it is almost extinct

(2) Resident type virus (Memory resident Virus):

Resident virus hiding in memory, its behavior seems to be parasitic in various low-level functions general (such as interrupts), because of this reason, resident virus often to disk cause greater damage. Once the resident virus enters the memory, as long as the execution of the file is executed, it is infected with the action, the effect is very significant. The only way to drive it out of memory is to cool the boot (and then turn it off completely when the power is turned off).

Instance

Friday 13th Black (13th) Friday-"light" out of the box

Date of onset: every Friday, 13th

Discovery Day: 1987