Directory Viruses

in that location be many ways to sabotage a estimator. Some malicious programs create bundle that automatic both in ally replicates itself and spreads throughout a computers accommodate system to destroy it later. One of these computer computer virus types is called the Directory computer virus. From its name itself, one can issue that it attacks the directory and read system of a computer. The computer uses a large file that contains study about its subdirectories and files. It includes information such as the starting cluster, the name, the time and date it was created or modified, attri howeveres such as being read-only, and some new(prenominal) information.Every time a file demand to be accessed, it searches for the directory entry and the starting cluster, an forefinger to the File Allocation Table or FAT. All the separate cluster addresses be in the FAT. So a Directory Virus infects clusters and allocates it in the FAT. It wherefore targets other clusters and infects other files. The destructive code is usually with executable files such as the ones ending with . EXE or . COM. The location or paths to the computers files go forthing accordingly be counterchanged by the Directory Virus so that it can infect other files.This lead be done transparently, without the users knowledge, until the original files will be im accomplishable to find. Eventually, the users files become trivial (Spam Laws, 2009). In May 1991, the DIR II virus was discovered first in Bulgaria. It is in addition cognise as Creeping closing and was written by the same programmers who coded the DIR, MG and Shake viruses. At that time, it was considered to be uncommon since directory viruses were still unknown. It changed directory entries only and did non change the files (Hypponen, 2010).It was eventually followed by variants such as the DIR III and DIR BYWAY viruses. The BYWAY virus appeared first in mid 1995 in Venezuala, but was possibly authored by a Chin ese programmer named Wai Chan since the code is write By Wai Chan (PR Newswire, 1995). It is similar to the DIR II family of viruses but alters the technique slightly by modifying directories and despoil linking executable files to point to a file named CHKLISTx. MSx, containing the viral code (Paris, 2010).The BYWAY virus has an interesting story since it reveals that people from distinguishable countries often disguise themselves using other countries. The Chinese search engine, Baidu, for example was attacked by malware that showed an Iranian flag, but Baidu doubts that it was Iranian. They believe that it was American hackers who did it. In the same way, the BYWAY virus claims that it was authored by Wai Chan on August 1994. And then when the virus is triggered, it pops out a depicted object saying, Trabajemos Todos Por Venezuela which means, We are all working for Venezuela.It withal plays music simultaneously, mimicking the Venezuelan national anthem. merely it is homog eneously that the real author is neither Venezuelan nor Chinese since crooks are not likely to leave their calling card at the scene of the crime. It is also possible to remove the virus without using disinfecting software. entirely rename all . COM and . EXE files with non-executable extensions. The virus will automatically correct the FAT. Then advert using a clean refer disk to remove the virus in memory, and rename everything back to its executable extensions.Do this for all hard disk partitions and the virus will be removed. Unfortunately, because viruses are popularly known to wreak havoc on computers, there is an urban myth propagating in the gentlemans gentleman that every time a PC doesnt work properly, it is always caused by a virus (Rutter, 1999). However, the fact is that not all PC problems are caused by viruses. There whitethorn be manufacturer bugs in the software or incompatibility issues with the hardware or software. Or the computer may simply be malfunction ing like any other electronic kink that eventually fails.