Appendix C. Classifying Computer Viruses - KAPERSKY ANTI-VIRUS - FOR FREEBSD-OPENBSD-BSDI FILE SERVER User Manual

16. Appendix C. 16. Appendix C.
16. 16. Appendix C. Appendix C.
Classifying computer viruses Classifying computer viruses
Classifying computer viruses Classifying computer viruses
Discussing various virus types.
The computer virus is a computer program (that is, executable code
and/or a collection of instructions) that can replicate itself (though the copy
may not necessarily exactly match the original) and penetrate files and
other resources of computer systems and networks and make them
perform tasks the virus dictates without the user's permission. Copies of the
program are also capable of self-replication.
Computer viruses can be classified using the following criteria:
environment;
operating system;
algorithm features;
destructive capabilities.
If we classify viruses according to environment, we come up with the
following types:
file viruses infect executable files (the most widespread virus
type), create twin-files (companion viruses), or use features of
the operating system arrangement (link viruses);
boot viruses occupy a boot sector or Master Boot Record of the
infected disk, or change the pointer to the active boot sector;
macro viruses infect documents and spreadsheets of several
popular editors;
network viruses use network and e-mail protocols and
instructions to spread themselves.
Of course, you may run across combination viruses. For example, file-boot-
viruses infect both files and boot sectors. Such viruses usually apply
extremely complicated performance algorithms and absolutely new
methods of infection, use stealth and polymorphic features, etc. Another
example of the combination virus is the network-macro-virus that infects
edited documents and broadcast its copies with e-mail messages.
204 204 204 204