What type of Virus is shown here?
A.
Cavity Virus
B.
Macro Virus
C.
Boot Sector Virus
D.
Metamorphic Virus
E.
Sparse Infector Virus
What type of Virus is shown here?
A.
Cavity Virus
B.
Macro Virus
C.
Boot Sector Virus
D.
Metamorphic Virus
E.
Sparse Infector Virus
A is the Ans.
Ans: E
E.
Sparse Infector Virus
This virus is “sparse” in how it goes about infecting a system. So it chooses a certain date, certain ext., certain program, certain repetitive behavior. (Office Space virus… check your commas)
A.
Cavity Virus – Hides between legitimate files to prevent discovery. (Also called file-overwriting virus – you don’t see the change in file length)
B.
Macro Virus – Infects large applications such as MS Suite (word, excel, etc) and VBA. Lookout for .doc ext in reference to a virus.
C.
Boot Sector Virus – Loads before the kernel, infects MBR.
D.
Metamorphic Virus – Rewrites itself after each infection the payload is also rewritten. The majority of its code is dedicated to rewriting the payload. (Don’t confuse this with polymorphic shellcode/virus – The difference is that the payload for poly virus stays intact after each change)