CHAPTER 7
COMPUTER VIRUS
Practice Questions
1. Define Computer Virus.
A computer virus is a software program attached to a legitimate program that is
destructive in nature and infects other programs in the system by replicating and
attaching itself to other healthy programs.
2. What is a virus? How does it differ from an ordinary program?
A computer virus is a malicious software program loaded onto a user’s computer without the
user’s knowledge and performs malicious actions. Because of its destructive use it is different
from ordinary program.
3. How can you protect your computer from viruses?
Use updated anti-virus program.
Do not copy pirated software on your computer.
Use the legal software from the reliable sources only.
Do not download suspicious shareware programs.
Use a secure operating system.
Avoid letting the system to be used by unauthorized users.
Allow you to schedule scans to automatically run for you.
Scan the computer using Virus Scanner while booting up the system.
Avoid loading of games that are passed as freeware.
Proper backup of all data and program files should be kept.
Remove suspicious and unnecessary files.
Make system files “Read only”.
Use vaccines and immunization programs to immunize computer against virus
infection.
Always protect your password.
Keep windows updated.
Use the scanned USB drives.
4. What is the difference between the computer virus and biological virus?
1) biological virus affects living organism while computer virus affects computer system
biological
2) Biological virus are naturally made whereas computer viruses are made by hackers
3) Biological virus can be treated by medicines, whereas computer viruses can be treated by
apps
5. What are the various types of viruses? Outline the net effect of each.
Boot Sector Virus
It is a type of virus which infects master boot record or hard disks. The infected code runs
when the system is booted from an infected disk. The computer is infected by this virus only if
the virus is used to boot up the system. After completing the booting of the system and running
the OS, the virus cannot infect the system.
Examples of boot viruses include: Polyboot.B, Joshi, Gravity, AntiEXE and Cbrain virus.
Companion Virus
It creates a copy of the file and places a different extension on it, usually .com. This makes a
companion virus difficult to detect, as anti-virus software tends to use changes in files as clue.
Some examples include: Stator, Asimov.1539, Stator and Terrax.1069
Email Virus
An email virus is a virus which is attached to email communications or sent with it.
Logic Bomb
Logic bombs and time bombs are small malicious programs to cause harm at a certain point
of time but they do not replicate. They are not even programs in their own right but rather
camouflaged segments of other programs.
Macro Virus
A MAC or Macro Virus is a virus which spreads to other computers through software programs
that utilize macros. These viruses infect the files created using some applications or programs
that contain macros such as doc, pps, xls and mdb.
Examples of macro viruses: Relax, Melissa.A, Bablas, O97M/Y2K.
Cross-Site Scripting Virus
It is called Cross-site scripting (XSS). It is an injection attack which is carried out on Web
applications that accept input, but do not properly separate data and executable code before
the input is delivered back to a user’s browser. The best example of XSS is Java-Script.
Worm
The Worm is very similar to a virus and has the ability to self-replicate itself and infect the
computer also. They travel longer distances by storing themselves in critical areas of the disk
from where they get loaded and have with them sufficient code to transfer themselves outward
from the infected system. Worms have been known to damage and infect the entire LANs.
Examples of Worm: Lovgate.F, Sobig.D, Trile.C, PSWBugbear.B, Mapson, Code Red, Nimda.
Trojan Horse
It is similar to virus. Trojan horse is a hidden malicious code that could alter or delete the
information of client computer or perform any other unauthorized function.
The activities of Trojans are: Deleting data, Blocking data, Modifying data, Copying data,
Disrupting the performance of computers or computer networks
6. What precautionary measures should be taken in order to keep your computer
safe from the virus?
• Keep Your Browser And Operating System Up-To-Date With Software Updates
• Use antivirus software and keep it current
• Make sure your passwords are well-chosen and protected
• Don’t open suspicious attachments or click unusual links in messages. They can
appear in email, tweets, posts, online ads, messages, or attachments, and sometimes
disguise themselves as known and trusted sources.
7. What is the difference between Trojan Horses and Virus?
Virus Trojan Horse
A Virus is a malicious executable code Trojan Horse is a form of malware that
attached to another executable file which capture some important information about
can be harmless or can modify or delete a computer system or a computer
1. data. network.
The main objective of virus is to modify The main objective of Trojan horse is to
2. the information. steal the information.
3. It is more harmful. It is less harmful as compared.
5. Virus can’t be controlled by remote. Trojan Horse can be controlled by remote.
Viruses are executed via executable Trojan horse are executed through a
6. files. program and interprets as utility software.
8. Virus replicates itself. Trojan horse does not replicate itself.
8. What is the difference between Trojan Horses and Bombs?
Trojan Horse: A Trojan (or Trojan horse) is a virus that hides itself inside another legitimate
program. When the program is used, the virus is released and can begin its work of replication
and annoyance or damage.
Bomb: A logic bomb is a program normally hidden deep in the main computer and set to
activate at some point in the future, destroying data.
9. Differentiate between Computer Virus and Computer Worm.
The primary difference between a virus and a worm is that viruses must be triggered by the
activation of their host; whereas worms are stand-alone malicious programs that can self-
replicate and propagate independently as soon as they have breached the system. Worms do
not require activation—or any human intervention—to execute or spread their code.
10. What are the effects of a virus on the computer?
• Computer Virus can slow down your computer performance and become inefficient or
run slowly.
• It tends to fill up the computer with useless data.
• Virus can corrupt the system files.
• Viruses can also wipe out the Boot Sector creating problems when you boot into the
windows, which contain system information.
• It can make the changes in the data of the programs or files and cause erratic results.
• It might steal important information from your computer and send the same to some
other person.
• It might reset or reboot a computer by sending the required codes.
• It might format a disk by sending the formatting command to the system thereby
causing to lose everything on the disk.
• The computer gets restarted frequently by itself.
• If the virus deletes the entire keyboard definition; the computer would not be able to
respond to any keyboard inputs.
• The virus might scramble the File Allocation Table (FAT) which contains the
information for the operating system. Any mishappening to the FAT will cause data to
be irrecoverably lost.
11. What is meant by Anti-Virus software? Name few popular anti-virus software.
Anti-virus software is a program which is designed to search, detect, prevent and remove
software viruses, and other malicious software like Trojans, worms etc. Some popular anti-
viruses are Norton Anti-Virus, McAfee, Kaspersky, AVG, Microsoft Security Essentials, Quick
Heal, EScan.
Fill in the Blanks
1. A Logic Bomb is inactive until you execute an infected program or application.
2. The virus was first found in 1949.
3. The biological virus contains the genetic material in the form of DNA or RNA.
4. The full form of Virus is Vital Information Resources Under Seige.
5. Viruses do not infect compressed files unless the file was infected prior to the
compression.
6. Virus can infect only computer Software.
7. Boot-sector virus usually exists on boot sector.
8. The logic bombs are used to sabotage Database.
9. The worm mostly attacks the LANs.
10. Trojan Horse does not replicate themselves like viruses and do not infect other software.
11. Which operating system is less affected by the virus Linux and Mac operating systems.
12. The virus is also attached with Email.
13. Once installed, an Antivirus program can be set to work in the background.
Extra MCQs
1. There are _________ types of computer virus.
a) 5
b) 7
c) 10
d) 12
Explanation: There are a total of 10 types of virus. These are categorized based on their
working and characteristics. These are System or Boot Sector Virus, Direct Action Virus,
Resident Virus, Multipartite Virus, Polymorphic Virus, Overwrite Virus, Space-filler Virus, File
infectors, Macro Virus, Rootkit virus.
2. Which of the following is not a type of virus?
a) Boot sector
b) Polymorphic
c) Multipartite
d) Trojans
Explanation: Types of viruses are System or Boot Sector Virus, Direct Action Virus, Resident
Virus, Multipartite Virus, Polymorphic Virus, Overwrite Virus, Space-filler Virus, File infectors,
Macro Virus, Rootkit virus. Trojan does not come under types of virus.
3. A computer ________ is a malicious code which self-replicates by copying itself to
other programs.
a) program
b) virus
c) application
d) worm
Explanation: A computer virus is a malicious code which self-replicates by copying itself to
other programs. The computer virus gets spread by itself into other executable code or
documents. The intention of creating a virus is to infect vulnerable systems.
4. Which of them is not an ideal way of spreading the virus?
a) Infected website
b) Emails
c) Official Antivirus CDs
d) USBs
Explanation: The ideal means of spreading computer virus are through emails, USB drives
that are used portable and injected and ejected in different systems as well as from infected
websites. Antivirus selling vendors do not place a virus in their CDs and DVDs.
5. The virus hides itself from getting detected by ______ different ways.
a) 2
b) 3
c) 4
d) 5
Explanation: The virus hides itself from getting detected in three different ways. These are by
encrypting itself, by altering the disk directory with additional virus bytes or it uses stealth
algorithm to redirect disk data.
6. _______________ infects the master boot record and it is challenging and a
complex task to remove this virus.
a) Boot Sector Virus
b) Polymorphic
c) Multipartite
d) Trojans
Explanation: Boot Sector Virus infects the master boot record & it is a challenging & a complex
task to remove such virus. Mostly such virus spreads through removable devices.
7. ________________ gets installed & stays hidden in your computer’s memory. It
stays involved to the specific type of files which it infects.
a) Boot Sector Virus
b) Direct Action Virus
c) Polymorphic Virus
d) Multipartite Virus
Explanation: Direct Action Virus gets installed & stays hidden in your computer’s memory.
Such type of virus stays involved to the specific type of files which it infects.