PrepAway - Latest Free Exam Questions & Answers

2 Comments on “What type of Virus is shown here?

  1. D33pBr3dt says:

    Ans: E
    E.
    Sparse Infector Virus
    This virus is “sparse” in how it goes about infecting a system. So it chooses a certain date, certain ext., certain program, certain repetitive behavior. (Office Space virus… check your commas)

    A.
    Cavity Virus – Hides between legitimate files to prevent discovery. (Also called file-overwriting virus – you don’t see the change in file length)
    B.
    Macro Virus – Infects large applications such as MS Suite (word, excel, etc) and VBA. Lookout for .doc ext in reference to a virus.
    C.
    Boot Sector Virus – Loads before the kernel, infects MBR.
    D.
    Metamorphic Virus – Rewrites itself after each infection the payload is also rewritten. The majority of its code is dedicated to rewriting the payload. (Don’t confuse this with polymorphic shellcode/virus – The difference is that the payload for poly virus stays intact after each change)


Leave a Reply