Computer Viruses and Antivirus Software: Protecting the School ICT Lab

Computer Viruses and Antivirus Software: Protecting the School ICT Lab

1. Introduction

In our previous guide, we explored how System Software (such as the Operating System and Device Drivers) keeps a computer functional, while utility programs protect machine health. However, as school ICT labs connect to the internet and students regularly share assignments using USB flash drives, computers face constant exposure to harmful programs designed to steal data, corrupt files, or slow down systems.

These hostile programs are broadly categorized as Malware (Malicious Software).

Understanding how computer viruses spread, recognizing common warning signs of infection, and learning how Antivirus Software detects and neutralizes digital threats are essential skills for maintaining healthy workstations in any computer lab.

2. Visual Sketchnote: Virus vs. Antivirus Architecture

 ╔══════════════════════════════════════════════════════════════════════════════╗

 ║ MALWARE & ANTIVIRUS SKETCHNOTE ║

 ╚══════════════════════════════════════════════════════════════════════════════╝

  [ INFECTION VECTORS ] [ SYSTEM DEFENSE LAYERS ]

    "How Malware Enters" "Antivirus Engine Protection"

   ┌──────────────────────┐ ┌───────────────────────────┐

   │ Infected USB Drives │ ──► │ 1. Real-Time Shield │

   ├──────────────────────┤ \ │ Monitors active RAM │

   │ Phishing Attachments │ ────► [ TARGET PC ] │ & file read/write │

   ├──────────────────────┤ / ├───────────────────────────┤

   │ Pirated / Crack Apps │ ──► │ 2. Signature Database │

   └──────────────────────┘ │ Compares file hashes │

                                                │ against known viruses │

                                                ├───────────────────────────┤

                                                │ 3. Heuristic Engine │

                                                │ Detects suspicious or │

                                                │ abnormal behavior │

                                                └─────────────┬─────────────┘

                                                              │ Action

                                                              ▼

                                                ┌───────────────────────────┐

                                                │ CLEAN / QUARANTINE / DELETE│

                                                └───────────────────────────┘

 ════════════════════════════════════════════════════════════════════════════════

3. Common Types of Computer Threats

Not all malicious programs behave the same way. Computer scientists classify malware based on how it replicates and damages systems:

 * Computer Virus:

   * Requires a human host action to spread (e.g., executing an infected .exe file or opening a corrupted .docx file).

   * Attaches itself to legitimate software, altering or corrupting files once launched.

 * Computer Worm:

   * A self-replicating program that spreads across computer networks without any human intervention.

   * Consumes network bandwidth and system memory, causing massive slowdowns across school LANs.

 * Trojan Horse:

   * Named after the mythical Greek wooden horse. It disguises itself as a useful, harmless program (like a free game, photo editor, or PDF converter), but executes malicious code in the background once installed.

 * Spyware & Keyloggers:

   * Secretly monitors user activity, capturing keystrokes (including login passwords and personal details) and transmitting them to unauthorized third parties.

 * Ransomware:

   * Encrypts the user's personal documents, spreadsheets, and databases using strong cryptographic ciphers, demanding a ransom payment to provide the decryption key.

4. How Antivirus Software Protects Your Computer

An Antivirus Program is a specialized utility designed to detect, quarantine, and eliminate malicious software from a computer system. Modern antivirus solutions employ three primary defense mechanisms:

 * Signature-Based Detection:

   * Antivirus developers maintain a global database containing unique digital fingerprints (hashes or signatures) of known malware strains.

   * When a file is opened or downloaded, the antivirus compares the file's binary code against this signature database.

 * Heuristic & Behavioral Analysis:

   * If a new or modified virus does not yet exist in the database, the heuristic scanner analyzes the program's behavior. If an unknown file attempts to overwrite system boot files, edit the Windows registry, or log keyboard strokes, the engine flags and blocks it.

 * Quarantine Isolation:

   * When an infected file cannot be safely cleaned, the antivirus moves it into a secure, isolated folder (Quarantine) where it cannot execute or infect other files, giving the administrator time to delete it safely.

5. ICT Lab Best Practices: Safe Computing Rules

To keep shared school computers clean and running smoothly, students should practice these lab habits:

 * Scan Removable Media First: Always scan any external pen drive with the antivirus utility before opening files.

 * Avoid Untrusted Executables: Never download .exe, .bat, or .scr files from unverified websites or random pop-up links.

 * Keep Virus Definitions Updated: Antivirus definitions should be updated regularly so the software recognizes the latest daily threats.

 * Disable AutoRun / AutoPlay: Prevent external flash drives from automatically launching scripts the moment they are plugged in.

6. Hands-on Lab Activity: Managing Windows Defender & Scanning Files

Students can practice basic cybersecurity maintenance on their lab workstations using built-in operating system security tools:

Task 1: Check Antivirus Status and Update Signatures

 * Press Win + I to open the Settings menu.

 * Navigate to Privacy & security > Windows Security.

 * Select Virus & threat protection.

 * Scroll down to Virus & threat protection updates and click Check for updates.

 * Ensure the security intelligence version reflects today's date.

Task 2: Perform a Custom Scan on a USB Drive or Folder

 * Insert a practice USB flash drive into the computer cabinet's front port.

 * Open File Explorer (Win + E) and navigate to This PC.

 * Right-click on the USB drive icon (or a specific download folder).

 * Select "Scan with Microsoft Defender..." (or your lab's installed antivirus software).

 * Review the scan summary: verify the total number of files scanned and ensure zero active threats are detected.

7. Review Questions & Key Answers

Q1: What is the primary operational difference between a computer virus and a computer worm?

 * Answer: A virus requires human action (such as opening or running an infected file) to replicate and spread, whereas a worm is completely autonomous and self-replicates across networks without human intervention.

Q2: What does it mean when an antivirus program places a file in "Quarantine"?

 * Answer: It moves the suspicious or infected file into a secure, restricted folder where its execution permissions are stripped, preventing it from harming the operating system while the user or administrator reviews it.

Q3: Why must antivirus signature definitions be updated regularly?

 * Answer: Thousands of new malware variants and exploit methods are created daily; without regular definition updates, the antivirus scanner will fail to recognize and block newly released threats.