Lyle is a systems security analyst for Gusteffson & Sons, a large law firm in Beverly Hills. Lyle’s responsibilities include network vulnerability scans, Antivirus monitoring, and IDS monitoring. Lyle receives a help desk call from a user in the Accounting department. This user reports that his computer is running very slow all day long and it sometimes gives him an error message that the hard drive is almost full. Lyle runs a scan on the computer with the company antivirus software and finds nothing. Lyle downloads another free antivirus application and scans the computer again. This time a virus is found on the computer. The infected files appear to be Microsoft Office files since they are in the same directory as that software. Lyle does some research and finds that this virus disguises itself as a genuine application on a computer to hide from antivirus software.
What type of virus has Lyle found on this computer?
A.
This type of virus that Lyle has found is called a cavity virus.
B.
Lyle has discovered a camouflage virus on the computer.
C.
By using the free antivirus software, Lyle has found a tunneling virus on the computer.
D.
Lyle has found a polymorphic virus on this computer
It’s not B ?
A camouflage virus disguise itself as legit files. For me, it’s B.
Hmm I want to say I agree but camouflage virus is too hard to pull off today, and if you go to the definition of it, along with the wording of the question, the application was not found previously, whereas a camouflage should have spit out a ‘fale positive’ by the current AV software (provided that scanners work on signatures and heuristics like most do today). However a tunneling virus sneaks in underneath the nose of the CURRENT AV installed (so it beat the current AV as the question indicates) and it took an entirely different AV software scanner to find it.
So tunneling virus would be correct because it intercepted and evaded any previous attempt to find it, by the original AV installed.