Selected viruses, spyware, and other threats: sorted alphabetically

This virus is interesting especially by the fact that it is by now the smallest known stealth virus. It is a memory resident, parasitic EXE infector. Length of its code is 205 bytes but it does not increase the files length. The virus stores its code in an empty part of EXE relocation table (area 133h-1FFh must be zero). The virus conceals its presence on disk but it does not do it consistently and so it is detected by integrity check programs. At the end of its body it has copyright (C) VVM (three letters initials – typically Russian). The virus occupies 768 bytes in memory.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.