Multipartite Virii - Multipartite virii infect both executable files and boot sectors and sometimes floppy boot sectors too.
- They are called multipartite because they infect in multiple ways rather than specific disk locations or file type.
- When you run a file infected with a multipartite virus, it infects the boot sector and next time you boot your system the virus activates again and sits in memory it then infects every program you run.
Armored Virii
- Armored virii protect themselves by adding code that makes them very difficult to trace, understand and disassemble the code.
- They may protect themselves by wrapping code that deflects the onlooker from the actual operating code or it might add distraction code that makes you think the virus is somewhere other than it's true location.
|