|Point of Origin||Russia|
|Operating system(s) affected||Windows|
Zmist (also known as Zombie.Mistfall) is a metamorphic computer virus created by the Russian virus writer known as Zombie. It was the first virus to use a technique known as "code integration". In the words of Ferrie and Ször:
This virus supports a unique new technique: code integration. The Mistfall engine contained in it is capable of decompiling Portable Executable files to [their] smallest elements, requiring 32 MB of memory. Zmist will insert itself into the code: it moves code blocks out of the way, inserts itself, regenerates code and data references, including relocation information, and rebuilds the executable.
- Zmist.gen!674CD7362358 - discovered in 2012.
- ZMist!IK - discovered 2011 - 2012.
- Zmist.A - discovered in 2006 - 2007.
- "ZMist: next generation viruses coming up". Wilders Security. Retrieved 18 February 2013.
- Ferrie, Peter; and Ször, Péter; Zmist opportunities, Virus Bulletin, March 2001, Abingdon, Oxfordshire (UK), pp. 6–7
- "Hunting for metamorphic", Metamorphic viruses description by Ször and Ferrie
- "Virus.Win32.ZMist.Predetect" by Secure List.
- "Remove Virus.Win32.ZMist Virus" by Spy Emergency.
|This malware-related article is a stub. You can help Wikipedia by expanding it.|