Table of Contents
Instructions for this Report
Akira Sasabe has a Virus
Edupage Online, December 1997, DOE Warning
Online Resources on Computer Viruses
What are Computer Viruses?
Who Creates Them and Why?
How do Computer Viruses Work?
What are the Virus Myths
Significance of the Existence of Computer Viruses
Others' Reactions to a Major Computer Scare
Comparison with my Classmates
Conclusion
Epilogue
Go to the Bottom
Introduction
Dr. James,
I decided to retype the whole thing today and I did just about the half of it now, and the information seems to appear all right on my web page. It was really unfortunate since this time I decided to use computers only at Porteus and Moore Hall. I still do not know what was the cause of the virus problem, but I think as long as I stick with one computer, it seems to be OK. I found my "favorite" computer at Porteus and do my best to secure the seat whenever I come in to do the work.
I just hope that I find out the cause of this problem so other people who do not have computers at home will not suffer like me...
My Reactions
I feel bad for what Akira Sasabe of Generation 7. My AOL went down a few weeks ago. I lost bookmarks, filing cabinet information, and some important addresses, and that was annoying enough. So, my sympathies for everyone who has experienced what Akira states in his above email to Dr. James. All of our information has been saved to two different disks. This is just in case one disk becomes infected with a virus we will always have a backup. I know that the disk is supposed to be the back up, but with the evolution of so many viruses of many different capabilities, I would rather be safer than sorry.
My Experiences with Computer Viruses
I have not personally experienced a virus' wrath, but from what Mr. Sasabe is describing, he has. Computer viruses do worry me, but I take precautions against infecting my computer. I never download any attachments from emails even if they are from my family. I never download anything off of the internet. My computer has a virus checker that my husband downloaded for free. I said that I do not download stuff, but he does. My brother has been hit with something that we call a virus. We are not sure what it was, but he was downloading information, which he frequently does, and his system died. He told me that some of the circuits in the mother board burned up from an overload. Whether this is true or not, it is the closest I come to discussing any viruses personally.
Edupage Online, December 1997
|
DOE ISSUES WARNING ON CRACKER TOOLS The U.S. Department of Energy has issued a bulletin warning that two new computer attack tools, known as Teardrop and Land, are being used maliciously by crackers intent on breaking into computer systems and networks. The software sniffs out vulnerable servers and launches attacks based on the "denial-of-service" strategy that overwhelms servers with bogus messages, blocking out legitimate traffic. "They hit the button and go down to the cinema with their girlfriends," says a senior systems consultant with the Defense Information Systems Agency. "They come back and see that they have looked at 200,000 systems." (TechWeb 24 Dec 97) |
For every advantage of technology, there seems to be two disadvantages. Computer attack tools are necessary for those who are interested in staying in the forefront of business or news, but they do not need to be destructive or annoying. What happened to the "good ol' days" where hackers simply went in, looked around at the information, and then left. Our society boasts the highest crime rate, the highest teenage pregnancy rate, and the highest divorce rate. There seems to be a general lack of respect for others and their property and affect. I do not see the purpose of "blocking out legitimate traffic." Are they trying to sabotage the government or the education system? Stories like these make me insecure about using the internet for business transactions and banking. It makes me nervous to know that someone is watching my every move. I don't like it in this physical space, nor do I like it in cyber space.
General Security Information Resources
1.
http://www.ciac.org/ciac/CIACHoaxes.html#history2.
http://www.mcafee.com/support/tedchdocs/vinfo/default.asp is not working, so try http://www.mcafee.com3.
http://www.av.ibm.com/BreakingNews/HypeAlert/4.
http://kumite.com/myths/5.
http://www.symantec.com/avcenter/hoax.html6.
http://www2.offutt.af.mil/wipo/virushoax.html Says that I am not allowed to go here.7.
http://csrc.ncsl.nist.gov/virus/My Recommendations
Dr. Solomon's Site contains a comprehensive list of the world's viruses, both current and past. There is also a listing for anti-virus programs.
McAfee Virus Scan Download This is a free service. Check now to see if your computer has any viruses.
Designing and Implementing Virus Protection This site leads small businesses and other Fortune 1000 companies in designing an anti-virus policy that fits their needs. There are many definitions and abstracts relating to computer viruses and their types.
Urban Legends Web Site I recommend this site to look up any thing you may suspect is a hoax. It is a very thorough site and has many interesting stories.
What is a computer virus?
The name "computer virus was coined by Fred Cohen in 1984. Prior to that these self replicating computer programs were called "rabbits" in the 1960's and "worms" in the 1970's. Symantec defines a computer virus as "a piece of software designed and written to adversely affect your computer by altering the way it works without your knowledge or permission." It may be damaging and it may just be annoying. Although viruses are designed to infect software, the affects on that software can make it seem as if your monitor, printer or other hardware is not working properly or at all.
What is their purpose?
The purpose of a virus is to drive the user of the infected software/computer system crazy. They lock up systems and destroy software. Viruses have no purpose other than possibly destroying a person's hard work and property. Not all viruses are damaging. Viruses can create traffic jams on the internet.
[Back to the Top]
Who Creates Them and Why?
Bored high schoolers create viruses, along with educated software engineers who are looking for challenges. Maybe they have destructive personalities and are control freaks. Some viruses have been written as jokes, and others have been purposely malicious. Computer programmers create viruses, and software companies hire many of these talented programmers. Viruses can be written by anyone, anywhere in the world, who has enough programming skill. A few have been developed by researchers for research, and other viruses have been written by people learning to program.
The virus is a computer program written in code which is attaches itself to specific programs or documents. Once the virus gets into your computer, then the trouble begins. The virus then carries out its job. That could mean erasing files or creating new files that will make noises when you touch a particular button. Another way viruses work is by lying dormant in your hard drive or on a file and waiting until a specific date appears on your system. On that particular date, it may erase any applications that you use.
[Back to the Top]How do they Spread?
Viruses spread through infected floppy disks. I give you my disk to borrow, and when you put it into your computer, the virus leaps forth into your system. You may use, as Mr. Asabe did, an infected computer which can infect your disk. Another thing that you should do cautiously, in downloading from the internet. Over 16% of viruses are transmitted this way. And finally, NEVER, NEVER, EVER download any e-mail attachments. E-mail attachments are the way that 26% of today's viruses travel.
What types are out there?
Duncan says that viruses are classified by what they attack when they infect computer systems. Someone else says that viruses are placed into 4 categories based on what they attack. Another source simply categorizes the viruses based on detection and encrypting abilities. There is probably no wrong way to categorize viruses. Here are a few examples:
|
1. |
Program Infectors: There are two types: Direct - which can scan though directory structures and look for ideal filed to infect, and Indirect - which sit and wait until the user executes or runs a file before being affected. |
|
2. |
Boot Infectors: Infect boot sectors and usually leave records in tact. |
|
3. |
Multipartite: They have the abilities of both the Program Infectors and the Boot Infectors.. |
|
4. |
System Viruses: Uusually targets particular system files such as the DOS command shell. |
|
5. |
Overwriting Viruses: Overwrites each file that it infects and the programs no longer run. |
|
6. |
Macro Viruses: Replicate in word processors and spread sheets. It attaches itself to email attachments. |
Viruses have also been placed into categories. Standard viruses are easy to detect, because they are found by using a string of characters. Polymorphic viruses go through metamorposes in order to try and keep from being detected by anti-virus software. More than one method of viral detection should be implemented in order to detect polymorphic viruses. Hiding themselves from being detected, Stealth Viruses attempt to override system functions that are used in reading files. There are fast viruses and slow viruses. The damage caused by computer viruses is also categorized into trivial damage (annoying beeps or pictures when you touch the keyboard), minor damage (such as deleting files opened on a specific day of the month), moderate damage (such as reformatting the hard drive), and major damage, severe damage, and unlimited damage.
Infamous Computer Viruses
Black Monday - on Mondays, a counter counts down from 240 each time a file is infected. When zero is reached, a low-level format of the hard disk is performed. Written by a Malaysian student.
Brain Virus - Beginning in Lahore, Pakistan, this boot sector virus replaces the boot sector of a floppy disk with its own code and moves the original boot sector further up the disk. While the virus is in memory the boot sector looks normal, as the virus redirects any attempt to look at it and displays the original boot sector instead. The virus has no ill effects other than slowing down the floppy disk drive and making 7Kb of memory unavailable to DOS.
Chernobyl - It strikes on the 26th of any month, but appears more frequently on April 26th , the anniversary of the Chernobyl accident. On this date, the viruses and there are three known variations stop the computer from being able to boot.
W97M/Ethan - This fast moving macro virus infects documents and templates once the infected document is closed.
Melissa - The most recent virus to make the news as of April 1999 is a Word97 Macro virus that spreads through e-mail. Once a resident in mail servers, the Melissa virus spreads as an e-mail attachment with the header "Important Message From [registered user's name]." As innocent recipients click on the attachment, the virus sends itself to the first 50 addresses in the personal address book. The virus was annoying and blocked systems for a few days. It even hit government agencies and utility companies.
Michelangelo - This boot sector virus began in Asia in 1991 and infects the partition sector of the hard disk when booted from an infected floppy disk. The virus then infects any floppy disk accessed when the virus is memory resident. It would infect the computer on March 6th by writing garbage on all tracks of all cylinders.
Stoned - Has many variations. New Zealand, Stoned, Bloody!, Marijuana, Australian, Hawaii, Hemp, Sanded, San Diego, Smithsonian, Sex, Brunswick, Hong Kong, Monkey, Monkey 2, Epbr, Lisa2, Whit, NOP, Stonehenge, and W-Boot is also a boot sector virus. On most systems it will only periodically display a message "Your PC is Stoned. Legalise Marijuana."
The Trojan Horse - This is a program type that is malicious, and the user is unaware. It is not self-replicating like a virus, but it can be very damaging. The Trojan Horse disguises itself as a legitimate program and when it is executed, it secretly damages your computer files and software.
[Back to the Top]
[Back to the Top]
E-mail chains that threaten the recipient were first introduced in early the late 1990's but now dominate e-mail systems. These emails claim that hackers have targeted you, in particular. They have reported that they will infect your computer with a virus, steal your password, charge phone sex to your credit card, release your social security number, permanently kick you off the Internet, and so on and so on. If, however, you forward the chain letter to 10 or 15 of your closest friends within the next 30 minutes, you will be spared these maladies. Your ten friends will thank you for sharing this with them, and they too will want to appease the evil hacker and send this message to 10 or 15 of their friends, and the cycle continues.
http://kumite.com/myths/ Is a great site because it lists all of the myths that you have ever heard, and then some. I will summarize a few for you here.
Under the "generic myths" heading:
|
Myth |
Reality |
|
"teenager hackers write most of the viruses out there" |
the U.S. Defense Department creates computer viruses for use as weapons. Trojan horses for many decades sprang from the minds of middle-aged men in business suits |
|
"viruses can hide inside a data file or in electronic mail or in the text of a worldwide web page" |
Data files can't wreak havoc on your computer -- only an executable program file can do that (including the program that runs every time you turn on or reboot a computer). |
|
"my computer could be infected if I simply connect to the Internet or dial an infected BBS" |
Internet connections and BBSs can't write information on your disks -- the communications software you use performs this task. You can only transfer a dangerous file to your computer if you let your software do it. |
|
|
And there is no "300bps subcarrier" by which a virus can slip through a modem. A joker who called himself Mike RoChenle ("micro channel," get it?) started this hoax after leaving a techy-joke message on a public network. |
|
"antivirus firms write and/or distribute viruses as a way to increase sales of their software" |
Antivirus companies don't write or distribute viruses just to generate more sales for their software. They don't need to -- thanks to a bountiful supply of people around the world who conduct virus research at their own expense (and who populate the world with more viruses in the process). |
|
"an e-mail titled "Join the Crew" has erased my friend's hard drive?pass this around and do not open Join the Crew" |
Viruses are not carried in e-mail messages. They must be carried in an e-mail attachment. Do not download attachments. |
|
"Deeyenda Maddick" virus warning |
Sounds like "the end of my ----", which is why it is a hoax |
There are many, many more, and way too many for me to list. Please visit this
Computer Virus Myth Site.[Back to the Top]
Why people propagate them?
Hoaxes may be created out of a desire to create fear and havoc, but hoaxes get propagated by people out of ignorance. Fearing the messages within the e-mails or the messages and it is so easy to just click a few buttons to send the e-mail to your 50 closest friends is how these hoaxes are propagated 10 fold. Society as a whole fears hackers and after reading that if "you don't send this to?.then you will have bad luck" or "?then your computer will crash and die,"you do what they say because you may not know that the originator cannot track the e-mails.
Rob Rosenberger, the Web Master of
Computer Virus Myth's homepage. "Most people who claim to speak with authority about computer viruses have little or no genuine expertise. Some virus experts describe it as "False Authority Syndrome" -- the person feels competent to discuss viruses because of his job title, or because of his expertise in another computer field, or simply because he knows how to use a computer." This also goes back to the power and control that a person needs to feel.Virus Pseudo Experts are another group of people who have a need to propagate and create virus hoaxes. I need to apologize in advance for the lengthy quoting, but Rosenberger captures the essence of why people propagate these myths. He was speaking at a conference and a network administrator stood up and said
"if a destructive virus of any type gets on our system." They would sell the office equipment; the secretaries would find new jobs; the lawyers would take their filing cabinets to other firms. The company would fold if even one destructive virus infiltrated their network. Shocked by his statement (and trying to regain control of the lecture), I asked what would happen if fire swept through the firm's building. No sweat: they kept backups off-site and had purchased contingency contracts for just such emergencies. I responded, "Well, there you go. If a virus ever gets on your computers, burn your building to the ground and your problem is solved! The audience laughed -- but I fumed. I would fire this man on the spot if he worked for my company! I don't want anyone on my payroll who would instantly put everyone out of work due to his own pompous ignorance."
Rosenberger explains why hoaxes are spread, and people will spread the word when they believe the source to be credible - some of the signs to look for to see if your message is a hoax.
Lots of capital letters, the sense of urgency - "send this to as many people as you can within 30 minutes."
When the sender is quoted as being associated with a reputable company, such as AOL or MicroSoft.
[Back to the Top]
Significance of computer viruses existence
Computer viruses exist and they should be a kind reminder that for every advance made in technology, or in any field of study, that there will be those people who are interested in challenging the system and trying to beat the system. We need to be prepared for such occurrences as it is human nature to be malicious and evil. There will always be those who feel it is necessary to push the limits at any expense, even the safety and security of others.
As we are trying to create computers that are more affective and human-like, I feel that viruses are a necessary component in this process. Just as we laugh and cry and become ill, so will our computers. There are days when it just isn't acting right and we say there is a bad connection, or we say that the traffic must be bad. Couldn't your computer simply be out sick today?
[Back to the Top]
How are they like biological viruses in function?
Biological viruses are strands of DNA or RNA which are protected by a protein capsule. Biological and computer viruses both need hosts to replicate. They are invasive and use existing human and animal cells as hosts for replication of themselves. Destruction of the cells and the organism may result from viruses. Similarly, computer viruses invade the hardware components of our computer systems via the software. It may destroy the software as it replicates and eventually lead to a total system failure.
Sometimes biological viruses mutate over time and species, like cancer. I know that cancer is not a virus, but it acts similar to other viruses. Cancer can be either benign (non-lethal) or malignant in which case it usually kills its host. Either one is treated aggressively with chemotherapy and radiation therapy in order to control the spreading of the out of control cells. Similarly, computer viruses, also need aggressive anti-virus software to protect the computer. It is especially difficult to treat the computer and its software that has been infected with the polymorphic viruses which actually change some of its codes in order to escape detection from an anti-virus program.
A Virus Hits the Government? :-O
People are always more afraid of the unknown and what they don't understand. I found many of the explanations of the viruses very technical, and difficult to understand, but the one thing that I have not mistaken is the seriousness of this growing problem. Computers are helping us run our lives and when there is a major glitch, then we panic.
Melissa Virus - April 1999
The public responded with great attention to this virus that got media coverage for more than 2 days. At first I thought it was a devastating virus that erased hard drives and "burned out components of one's computer" (which happens to be a myth). It wasn't until I actually sat down and read online about the virus. I found out that it was not damaging, just a minor annoyance in our busy little lives. It was interesting, however, to see how much attention Melissa received since it was able to infiltrate large business and government networks. People were even concerned about where the name came from?a stripper in Florida that the creator used to visit.
[Back to the Top]
Comparison with my classmates
My first thought is that mine is long. I have reread it and I am hoping that it isn't long winded.
For Future Generations, you will always have newer and scarier viruses and more threatening hoaxes. Please feel free to use this document for any of your reports. As I stated in my homepage, this site is a culmination of quotes, paraphrases and interpretations from and of other sites and reports from prior generations. That is what a generational curriculum is all about. I had copy and pasted identical parts of four prior reports side-by-side so that I could see what they covered because I was interested in taking a different approach. I hope that I achieved this goal, and introduced you to some new material. After that, I visited each of the 7 links under the
general security information. All except one worked and they were all very useful in helping me to answer each of the parts of this report. By sifting through others' sites prior to doing this report, I was able to locate other helpful links. Finally, the hardest part?sitting down and typing it out. There was much copy and pasting of links and quotes. My report is 21 pages long and most of it is single spaced. I do not feel that I would have been able to cover this material in any less than 18 pages. There are many questions within each tagged sub-heading which I made into separate sections in order to clearly discuss my responses.Epilogue
I just received this mail on May 7, 1999. As a result of doing this report, I am no longer afraid of e-mails like this. "DO NOT OPEN ANY EMAIL FROM Sassyced@aol.com !!!!!!!!!! IT LOOKS LIKE A REAL EMAIL! She? ALSO HAS A PROFILE!! But it crashes all your system and will not open AOL unless you type your address and credit card information!!!!! and u cannot even delete this virus! The name off the virus is SASSY.SHS Please send this mail to everyone in your buddy list!!!!!!!!!!!!"
This has all the signs of being a hoax. First?"send this mail to everyone?" Second, there are lots of words that are entirely capitalized. Third, the subject line was "Important Info."
I have learned more than I ever wanted to know about viruses. I thought there was only one type and I did not know that a virus can not physically damage the computer's hardware. I recommend that you install at least two different types of virus checkers on your system and always have at least two back up disks. Never rely on information on your hard drive. It could be erased or altered in a fraction of a second.
My Home Page // My Generations File // My Newsgroups File // Affective Computing Oral Presentation // Life on the Screen: Chapter 8 Summary // My Report 1: Psychology of Computer Viruses // My Report 2: Psychology of Virtual Online Communities // Icons Folder // My Generation's Home Page Index // For AOL Users // Helpful Hints for Surviving // Virus Joke list // Index to All Generations // Home Page of Dr. Leon James // Send Me a Message // Go Back to the Top