← Back to catalogue
Research draft

computer virus

vr.tr.computer-virus · PHY.OBJ

Let an agent explain computer viruses for defensive and educational purposes, relay types, history, transmission and protection from cybersecurity sources, describe the named types and examples, and distinguish viruses from worms, trojans, ransomware and other malware, without providing any code or instructions to create or spread malware.

Thing Registry Physical world and living systems

Research draft, second pass

A second pass drafted this model: the structure a model of this thing needs, and what is known about it in the world. The line under this one says how the second half was obtained - researched against sources, or recalled without web access, in which case nothing here was read anywhere and every claim is a lead to verify. Unreviewed either way.

written by Claude from model knowledge without web access - no source was read, every claim is a lead to verify

Researched by: Claude

Purpose and description

Let an agent explain computer viruses for defensive and educational purposes, relay types, history, transmission and protection from cybersecurity sources, describe the named types and examples, and distinguish viruses from worms, trojans, ransomware and other malware, without providing any code or instructions to create or spread malware.

A type of malware that inserts its code into other programs or documents so that it replicates when the host runs, potentially damaging data, spreading through files, boot sectors or networks, and often carrying a payload; kinds the registry aliases name include boot sector viruses that infect disk startup areas, resident viruses that stay in memory, macro and HyperCard document viruses, joke viruses that are harmless pranks, and specific historical examples such as the AIDS trojan of 1989 and SWF.LFM.926. The model explains viruses for defence and education only and gives no instructions for creating or spreading malware; people should use reputable antivirus software and keep backups, and infected systems should be handled with official guidance.

What it is for: Not applicable; malicious software, described for defence.

It can be explain types and history; relay transmission and protection; describe named examples; distinguish malware types.

Distinguishing features

Requires a host

Self-replicating

May carry payloads

Spreads on execution

What it looks like

Not visible; detected by antivirus tools and by symptoms such as corrupted files.

Physical character

Creeper experiment: 1971 note - early self-replicating program

Brain boot sector virus: 1986 year - early PC virus

registry parents: malware, digital organism note

How it is recognised

Self-replicating malicious code that infects host programs

Joke virus, HyperCard virus, SWF.LFM.926, resident virus, boot sector virus, AIDS trojan

Worms spread without a host; trojans disguise as legitimate software; ransomware encrypts files for ransom; spyware collects data

Related models

is a kind of - in registry terms

malware

is contrasted with -

computer worm

is contrasted with -

trojan horse

is detected by -

antivirus software

In practice

Families and kinds

boot sector viruses

file infectors

macro viruses

resident viruses

polymorphic viruses

Standards and regulation

Computer misuse and cybercrime laws

Data protection breach notification rules

Failure modes and hazards

Data loss and system damage

Providing malware instructions

Spread through removable media and email

Also called

joke virusHyperCard virusSWF.LFM.926resident virusboot sector virusAIDSA and Astealth virusiframe virusmultipartite virusMacro viruspolymorphic codeRipperAlconAntiCMOSVBS.Avm

Where this came from

wikidata · CC0 1.0

Drafted structure

Bundle to layer to finding to question, as the second pass will find it: 4 bundles · 8 layers · 8 findings · 16 questions.

Understand What a computer virus is.

Definition.

Definition

Definition.

Definition

Definition.

  1. Is a device infected or showing ransom demands, in which case disconnect it, seek official guidance and do not pay ransoms without advice? boundary
  2. What is a computer virus, and how does it differ from worms, trojans, ransomware and spyware? definition

Types

Named types.

Types

Types.

  1. What are boot sector, resident, macro and joke viruses, and what were the AIDS trojan and SWF.LFM.926? definition
  2. Is any request to create or spread malware refused? boundary
History History.

Sources.

Early viruses

Early viruses.

Early viruses

Early viruses.

  1. How did early viruses such as Brain and the Morris worm shape the field? provenance
  2. Which references are standard? provenance

Evolution

Modern malware.

Evolution

Evolution.

  1. How has malware shifted from viruses to worms, botnets and ransomware? provenance
  2. Which sources are cited? provenance
Defence Protection.

Regulation.

Protection

Protection measures.

Protection

Protection.

  1. How do antivirus software, updates and backups protect systems? action
  2. Is the information current? boundary

Response

Incident response.

Response

Response.

  1. What steps do official guides recommend after infection? provenance
  2. Which entry fits incident response? action
Context Detection.

Science.

Detection

Detection methods.

Detection

Detection.

  1. How do signature and behaviour-based detection work? provenance
  2. Which entry fits antivirus software? action

Law

Cybercrime law.

Law

Law.

  1. How do laws treat creating and spreading malware? provenance
  2. Is the presentation neutral and attributed? boundary

What the second pass must settle

  • Should the AIDS trojan be reclassified, since it is a trojan rather than a virus?
  • Should macro viruses be a separate entry?
  • How should malware taxonomy sources be linked?