On the analytical and guard against computer viruses

[Paper Keywords] Computer virus prevention

[Abstract] With the Computer in all areas of social life, the extensive use and popularity of Computers and networks, the rapid development of Computer viruses present growing trend, which seriously interferes with the normal human social life, to the Computer system has brought great potential threat and damage present, the virus has become plagued computer systems and computer applications major security issues. In order to ensure the safety and smooth flow of information, from the concept of computer viruses, analyzes the content and type of computer virus, and the source of computer viruses analysis, and finally introduce the main computer virus protection measures.



A computer virus content, type

Computer Virus (Computer Virus) in the <<People's Republic of computer information system security protection regulations>> be defined as: "refers to the preparation or inserted in a computer program function or destruction of computer data destruction, computer use and impact of self-replicating a set of computer instructions or code. "you can talk about computer virus is a program, a piece of executable code, just like biological viruses, computer viruses have the unique ability to replicate. Computer viruses can spread quickly, and often difficult to eradicate They can attach themselves in all types of documents when the file is copied or transferred from one user to another user, they spread with the accompanying documents in recent years, resulting in several major virus :
(A system virus system virus prefix: Win32, PE, Win95, W32, W95, etc. These viruses generally public nature can be infected with windows operating system *. exe and *. dll files, and these documents communication, such as the CIH virus.

(B worm. Worm prefix is: Worm. The public properties of this virus is a network or system vulnerability to spread, the majority of worms have to send out infected e-mail, blocking the network features, such as shock waves (blocking network, Small Postman (send infected e-mail.

(C Trojan viruses, hackers, virus Trojan virus whose prefix is: Trojan, hackers, viruses prefix name generally Hack. Trojan is a network or the public properties into the user's system vulnerabilities and hide, then reveal the user's information to the outside world, The hackers, viruses have a visual interface to the user's computer for remote control Trojan horses, hackers, viruses often occur in pairs both types are now a growing tendency to integrate General Trojans such as QQ news tail Trojan Trojan.QQ3344, there you are more likely to meet the Trojans for online games such as Trojan.LMir.PSW.60.

(D script viruses. Script virus prefix is: Script. Script viruses is the use of public property written in scripting languages, through the pages of the spread of the virus, such as Code Red (Script.Redlof. Script virus will have the following prefixes: VBS, JS (shows what kind of scripting, such as Happy Hour (VBS.Happytime and so on.

(Five macro viruses. In fact, the script is a macro virus is a virus, because of its specificity, so here counted as a separate category. Macro virus prefix is: Macro, the second prefix is: Word, Word97, Excel, Excel97 (and perhaps one other, such as: the famous Melissa (Macro.Melissa).

(F backdoor virus. Backdoor virus prefix is: Backdoor. Class public properties of the virus is spread through the network to the system to open the back door, a security risk to the user computer, such as 54 many of my friends encountered IRC backdoor Backdoor.IRCBot.

(G plant-virus program virus public properties of this virus is released from the body will run out one or more new viruses to the system directory, by the release of new viruses cause damage, such as: ice sower (Dropper . BingHe2.2C, MSN striker (Dropper.Worm.Smibag) and so on.

(Eight destructive virus programs. Destructive virus prefix program is: Harm. Public properties of this virus is inherently attractive to entice users to click on the icon when the user clicks on the type of virus, the virus will be produced directly on the user's computer damage, such as: formatting the C drive (Harm.formatC.f, killer command (Harm.Command.Killer and so on.

(I joke virus joke virus prefix is: Joke. Also known virus hoaxes. Public properties of this virus is inherently attractive to entice users to click on the icon, the real virus and not any damage to the user computer, such as: the ghost (Joke.Girlghost virus.

(X binding machine virus. Bundling machine virus prefix is: Binder. The public properties of this virus is the virus will use the specific bundles virus with some applications such as QQ, IE tied up, the surface is a normal file, when users run the bundled virus, it will run these applications on the surface, and then tied to run a virus hidden, thus causing harm to the user, such as: bundling QQ (Binder.QQPass.QQBin and so on.

Second, the main source of computer virus

1. Engaged in computer and amateur pranks, make fun of creating the virus, such as dots of a class of benign virus. Links to free download http://www.hi138.com 2. Software companies and users to protect their software from illegal copying and to take retaliatory penalties, because they found locked on the software, as virus in which the possession of illegal copies of hit big, it even contributed to the spread of viruses .

3. To attack and destroy computer information systems and computer systems is deliberately made to destroy the virus ---- such as the end of 1987 in Israel, the Jewish University of Jerusalem Xibo Lai virus, is frustrated at work, employees dismissed or the deliberate creation of of it targeted, devastating, resulting in an internal, hard to detect.

4. Useful for the purpose of research or design process, for some reason lost control or produce unexpected results.


Third, the computer virus prevention measures

1. Should develop in time to download the latest security patches security practice, to eliminate the root causes of vulnerabilities hackers to attack a user's computer virus the same time, updating antivirus software, virus, real-time monitoring on a day to prevent the virus should be compulsory.

2. Make a backup of important data regularly to avoid significant losses.

3. Choose to have "Firewall page" function of the anti-virus software, anti-virus software update virus database every day, killing time on your computer for viruses, anti-virus software on all the time online monitoring.

4. Do not open unknown sources in Excel or Word document, and to promptly update the virus database, open real-time monitoring, so as not to be viruses.

5. Internet browsing, anti-virus software must be open, real-time monitoring, to avoid being viruses.

6. Internet browsing, Do not click on strange sites unsafe for fear of viruses.

7. Update computer anti-virus software, firewall, installed in time for the operating system patches.

8. In the Internet pay attention to strengthening the process of self-protection to prevent access to illegal sites, these sites tend to sneak malicious code, once the user opens the page that will be implanted Trojan horses and viruses.

9. Use the Windows Update feature to play system-wide patch to avoid virus invasion of the way from the Trojan to the system.

10. Will apply software upgrade to the latest version, which includes a variety of IM instant messaging tool, download tool, player software, search toolbar, etc., not to log on the website of unknown origin, to avoid the virus to use other software vulnerabilities Trojan horse virus.


References:
[1] Chen Lixin Computer: Virus Prevention knowledgeable [M]. Beijing: Tsinghua University Press, 2001.

[2] Ji Zhigang from qq beginning to understand network security, China Science and Education Expo 2004 (9.

[3] Ji Zhigang Computer, network and information society technology consulting Herald, 2006 (20).

[4] You-Qing Han Computer Virus Analysis and Prevention Daquan [M]. Beijing: Electronic Industry Press. 2006. Links to free download http://www.hi138.com