Slow Virii - Slow virii are hard to detect be cause they only infect files (*.com for example) that the OS is modifying or copying.
- A slow virus only infects a file when a user performs some operation on the file.
- For example a slow virus might only infect the boot sector of a floppy w hen commands such as format and sys write to the boot sector.
- A slow virus might infect the copied version but not the original.
Retro Virii
A retro virus is a virus that bypasses, edits, or destroys Anti-Virus programs by attacking it directly. Making a retro virus is a pretty simple task as all the programmer has to do if find the execution path and edit or otherwise hinder the Anti-Virus software, this could involve editing the AV itself or its definition files which could render the AV useless and the user totally oblivious to ANY virii that infect their system. Other types of retro virii detect the AV and either hide from it, stop the AV, or in some cases trigger a destructive payload before the AV has chance to stop it.
 |