The simplest example is that a virus needs to modify a file by overwriting or adding its code to the file, so that when the file is running, so is the code for the virus. The integrity of the checksum method consists of taking a checksum of clean files or disks. Any change to the checksum indicates that the files or disks have been modified by what could be a virus.