PDF p.334
In progress
Computer Viruses
Summary
PDF p.334A computer virus is a type of malware that replicates and spreads by infecting executable applications or program code. Viruses are classified based on the type of file or media they infect.
Detailed explanation
PDF p.334-
Types of Viruses
-
Non-resident/File Infector
- Contained within a host executable file.
- Runs with the host process, infects other process images, and performs payload actions.
-
Memory Resident
- Creates a new process in memory when the host file is executed.
- Remains in memory even if the host process is terminated.
-
Boot
- Written to the disk boot sector or partition table.
- Executes as a memory-resident process when the OS starts or media is attached.
-
Script and Macro Viruses
- Uses programming features in local scripting engines (e.g., PowerShell, WMI, JavaScript).
- Can be embedded in documents like Microsoft Office files with VBA or PDFs with JavaScript.
-
Non-resident/File Infector
-
Special Terms
- Multipartite: Viruses that use multiple vectors.
- Polymorphic: Viruses that dynamically change or obfuscate their code to evade detection.
Important terms
taken from the text above- Multipartite
- Viruses that use multiple vectors.
- Polymorphic
- Viruses that dynamically change or obfuscate their code to evade detection.
What I should remember
Key Points PDF p.334-
Types of Viruses
- Non-resident/File Infector: Infects host executable files, runs with the host process.
- Memory Resident: Creates a persistent process in memory.
- Boot: Infects boot sector or partition table, executes on OS start.
- Script and Macro Viruses: Uses scripting engines, embedded in documents.
-
Special Terms
- Multipartite: Multiple vectors.
- Polymorphic: Changes code to avoid detection.