ZMist
From Wikipedia, the free encyclopedia
ZMist (also known as Zombie.Mistfall) is a metamorphic computer virus created by Russian virus writer known as Z0mbie. It was the first virus to use a technique known as "code integration". In the words of Szor and Ferrie (see link below):
This virus supports a unique new technique: code integration. The Mistfall engine contained in it is capable of decompiling Portable Executable files to its smallest elements, requiring 32 MB of memory. Zmist will insert itself into the code: it moves code blocks out of the way, inserts itself, regenerates code and data references, including relocation information, and rebuilds the executable.
[edit] See also
- Simile — another well-known metamorphic virus.
[edit] External links
- "ZMist opportunities", ZMist's analysis by Peter Ferrie and Peter Szor
- "Hunting for metamorphic", Metamorphic viruses description by Szor and Ferrie
 |
This malware-related article is a stub. You can help Wikipedia by expanding it. |
