Computer Viruses

Computer viruses' hijacking abilities led them to be named after biological viruses

Just as their counterparts infect cells and take control of cellular processes to replicate endlessly, computer viruses cannot replicate on their own and must copy their code into host software before duplicating when the program or file is opened. The term "virus" comes from the Latin word for "venom."

Different types of malware are categorized by how they spread or operate

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

Elk Cloner, the first computer virus to spread in public, was written as a practical joke by Richard Skrenta, a Pittsburgh high school student.

Some viruses evade detection by altering their own code or hiding in Microsoft Office

Computer viruses are often classified by how they spread or which files they infect, with the oldest ones—boot sector viruses—targeting systems that are active when a computer is turned on. Macros—custom codes in office productivity programs authored to automate tasks—spawned their own class of viruses.

Logic bomb viruses can awaken from a dormant phase without human input

Theoretically, computer viruses can remain idle indefinitely while awaiting specific user actions, as instructed by their code. However, logic bombs—embedded code that triggers when specific conditions are met—can automatically execute viruses, such as when a certain date or time is reached.

Peter Norton, for whom Norton Antivirus is named, questioned the threat of viruses

The software author was among several computer experts in 1988 who suggested that reports on the threat of computer viruses were exaggerated, referring to testimonials of infections and their spread as "urban legends."

Computer viruses can slow systems by allocating resources to malicious actions

Once infected software is run, instructions in the malicious code within the program or file can copy the code to various locations, exacerbating the infection and producing additional symptoms, such as slow performance, altered login credentials, changes to device settings, and system crashes.

Many early computer viruses were not created for malicious purposes

Besides those authored in research labs as proofs of concept for self-replicating software, hobbyists would create malware that played music or displayed text and animations that intentionally revealed the infection as a means of showing off, rather than hiding their spread.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

Modern antivirus software searches for malicious behavior alongside malicious code

The first viral infections were identified by comparing the computer code of programs and files with a database of known virus codes, a method known as signature detection. The ongoing creation of new malware made databases continuously outdated, leading to the development of systems that detect patterns consistent with known viral activity.