Encrypted Viruses

Hello Everyone!!!! I would like some help with my University Project. If you could give me names of some known Win32 encrypted viruses. It would help if you could send some link to the virus' analysis.

 

What I call an encrypted virus you may ask.

Encrypted viruses are viruses that can avoid detection by antivirus software by encrypting the biggest part of the virus, leaving unencrypted only a simple routine which decrypts the virus and a random key for encryption.

 

It would be great if you could help ASAP.

Comments

  • Thank  you very much. Your examples are a great help, however I think polymorphic viruses are on another chapter. I believe encrypted viruses refer to metamorphic viruses. So for example I'd say now that I have searched far and wide, Win32.Apparition. I will write about polymorphic viruses on another chapter using your examples. Thank you really much.

  • gancal
    gancal Posts: 21 F-Secure Product Expert

    Glad to be of help. :)

     

    p/s: Something more recent, Upatre family might be of interest as well.

     

     

  • _CyberGhosT_
    _CyberGhosT_ Posts: 18 Observer

    You may also find what you need over at MalwareTips.
    I am a member there, and a lot of testing and reviews goes on there. We have a updated list of Viruses & Malware we use for testing & review purposes. PeAcE

This discussion has been closed.