Zmist (also known as Z0mbie.Mistfall) is a
metamorphic
Metamorphic rocks arise from the transformation of existing rock to new types of rock in a process called metamorphism. The original rock ( protolith) is subjected to temperatures greater than and, often, elevated pressure of or more, cau ...
computer virus
A computer virus is a type of computer program that, when executed, replicates itself by modifying other computer programs and inserting its own code. If this replication succeeds, the affected areas are then said to be "infected" with a compu ...
created by the Russian virus writer known as
Z0mbie. It was the first virus to use a technique known as "code integration". In the words of
Ferrie and
Ször:
[Ferrie, Peter; and Ször, Péter]
''Zmist opportunities''
Virus Bulletin, March 2001, Abingdon, Oxfordshire (UK), pp. 6–7
This virus supports a unique new technique: code integration.
The Mistfall engine contained in it is capable of
decompiling Portable Executable files to heirsmallest
elements, requiring 32 MB of memory. Zmist will insert
itself into the code: it moves code blocks out of the way,
inserts itself, regenerates code and data references, including
relocation information, and rebuilds the executable.
Variants
*Zmist.gen!674CD7362358 - discovered in 2012.
*ZMist!IK - discovered 2011 - 2012.
*Zmist.A - discovered in 2006 - 2007.
See also
*
Simile
A simile () is a figure of speech that directly ''compares'' two things. Similes differ from other metaphors by highlighting the similarities between two things using comparison words such as "like", "as", "so", or "than", while other metaphors cr ...
, a well-known metamorphic virus
*
Computer virus
A computer virus is a type of computer program that, when executed, replicates itself by modifying other computer programs and inserting its own code. If this replication succeeds, the affected areas are then said to be "infected" with a compu ...
*
Comparison of computer viruses
The compilation of a unified list of computer viruses is made difficult because of naming. To aid the fight against computer viruses and other types of malicious software, many security advisory organizations and developers of anti-virus software ...
References
External links
"Hunting for metamorphic", Metamorphic viruses description by Ször and Ferrie"Virus.Win32.ZMist.Predetect"
by Secure List.
Windows file viruses
{{malware-stub