Which virus type hides from antivirus by concealing the original file size or presenting a copy of itself elsewhere while the infected file remains?

Prepare for the Certified Ethical Hacker Version 11 Exam with a comprehensive test featuring flashcards and multiple choice questions, each accompanied by hints and explanations to ensure a thorough understanding. Ace your ethical hacking exam with confidence!

Multiple Choice

Which virus type hides from antivirus by concealing the original file size or presenting a copy of itself elsewhere while the infected file remains?

Explanation:
Stealth viruses rely on deception to avoid detection. They conceal their changes so the system or antivirus software sees an uninfected file. A classic trick is to report the original file size or contents, even though the infected code is present. In some variants, the virus keeps a copy of itself elsewhere and presents a clean version of the file to the user or to the scanner, while the malicious payload remains hidden. This makes the infection hard to spot with straightforward checks like file size or reading the file’s contents. This approach is what distinguishes stealth viruses from other types. A system/boot-sector virus focuses on the boot area rather than hiding modifications; a multipartite virus infects multiple vectors; a macro virus hides inside document macros. The stealth behavior specifically targets evasion by presenting a trusted view of the file while the infection persists.

Stealth viruses rely on deception to avoid detection. They conceal their changes so the system or antivirus software sees an uninfected file. A classic trick is to report the original file size or contents, even though the infected code is present. In some variants, the virus keeps a copy of itself elsewhere and presents a clean version of the file to the user or to the scanner, while the malicious payload remains hidden. This makes the infection hard to spot with straightforward checks like file size or reading the file’s contents.

This approach is what distinguishes stealth viruses from other types. A system/boot-sector virus focuses on the boot area rather than hiding modifications; a multipartite virus infects multiple vectors; a macro virus hides inside document macros. The stealth behavior specifically targets evasion by presenting a trusted view of the file while the infection persists.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy