Zmist information

Win32.Zmist
Aliases	Z0mbie.Mistfall
Type	Computer virus
Isolation	2002
Point of origin	Russia
Author(s)	Z0mbie
Operating system(s) affected	Windows
Filesize	9 kbytes

Zmist (also known as Z0mbie.Mistfall) is a metamorphic computer virus^[1]^[2] created by the Russian virus writer known as Z0mbie. It was the first virus to use a technique known as "code integration". In the words of Ferrie and Ször:^[3]

This virus supports a unique new technique: code integration. The Mistfall engine contained in it is capable of decompiling Portable Executable files to [their] smallest elements, requiring 32 MB of memory. Zmist will insert itself into the code: it moves code blocks out of the way, inserts itself, regenerates code and data references, including relocation information, and rebuilds the executable.

^ Aspevik, Egil; Detection of Junk Instructions in Computer Viruses, Masters Thesis, May 2008, University of Oslo (UiO).
^ "ZMist: next generation viruses coming up". Wilders Security. Retrieved 18 February 2013.
^ Ferrie, Peter; and Ször, Péter; Zmist opportunities, Virus Bulletin, March 2001, Abingdon, Oxfordshire (UK), pp. 6–7

[1] Aspevik, Egil; Detection of Junk Instructions in Computer Viruses, Masters Thesis, May 2008, University of Oslo (UiO).

[2] "ZMist: next generation viruses coming up". Wilders Security. Retrieved 18 February 2013.

[3] Ferrie, Peter; and Ször, Péter; Zmist opportunities, Virus Bulletin, March 2001, Abingdon, Oxfordshire (UK), pp. 6–7

Zmist information

and 8 Related for: Zmist information

Zmist

Comparison of computer viruses

Dzhokhar Dudayev

Metamorphic code

Derussification in Ukraine

Sinda District

Tamara Duda

Nikolai Nikitchenko