Malware Flashcards
System or Boot Viruses
move actual Master Boot Record (MBR) from its actual location, the virus responds from the original location of MBR when the system boots, it executes the virus first.
File Viruses
infect executable files or BAT files.
Multipartite Viruses
infect boot sector and files simultaneously.
Macro Viruses
designed for Microsoft Office and other application using Visual Basic for Application (VBA).
Cluster Viruses
designed to attack and modify the file location table or directory table.
Stealth/Tunneling Viruses
to evade detection, stealth virus employs tunnel technique to launch under anti-virus via a tunnel and intercepting request from Operating System Interruption handler.
Logic Bombs
esigned to remain in waiting state until a predetermined event occurs, then payload detonate and perform its intended task, difficult to detect, difficult to detect.
Encryption Virus
uses encryption to avoid detection, use new encryption to encrypt and decrypt the replica.