External links
- "Hunting for metamorphic", Metamorphic viruses description by Ször and Ferrie
- "Virus.Win32.ZMist.Predetect" by Secure List.
Hacking in the 2000s | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Incidents |
| ||||||||||||||||||||
| Groups | |||||||||||||||||||||
| Individuals | |||||||||||||||||||||
| Vulnerabilities discovered |
| ||||||||||||||||||||
| Malware |
| ||||||||||||||||||||
| Zmist | |
|---|---|
| Malware details | |
| Alias | Z0mbie.Mistfall |
| Type | Computer virus |
| Isolation date | 2002 |
| Origin | Russia |
| Author | Z0mbie |
| Technical details | |
| Platform | Windows |
| Size | 9 kbytes |
Zmist (also known as Z0mbie.Mistfall) is a metamorphic computer virus created by the Russian virus writer known as Z0mbie. It was the first virus to use a technique known as "code integration". In the words of Ferrie and Ször:
This virus supports a unique new technique: code integration. The Mistfall engine contained in it is capable of decompiling Portable Executable files to [their] smallest elements, requiring 32 MB of memory. Zmist will insert itself into the code: it moves code blocks out of the way, inserts itself, regenerates code and data references, including relocation information, and rebuilds the executable.
 | This malware-related article is a stub. You can help Wikipedia by adding missing information. |