Which virus type transfers all control of the host code to the viral code residing in memory?

Which virus type transfers all control of the host code to the viral code residing in memory?

• A. Worms
• B. Transient virus
• C. Intrusive viruses
• D. TSR virus

Answer: (B)

When a virus stays loaded in memory and continues to run after the infected program finishes, it can control what happens next by intercepting the host’s execution and redirecting it to the viral code. This persistence and redirection is the hallmark of a memory-resident operation. The type that is designed to terminate the current process momentarily and stay resident in memory, ready to take over execution whenever needed, is the TSR virus (Terminate and Stay Resident). By living in memory, it can hijack control flows, run its code, and then hand control back to the host or propagate further. Worms, on the other hand, are standalone programs that spread across networks and aren’t defined by hijacking host execution in memory. Transient (non-resident) viruses infect files and operate only during that run, leaving memory as soon as the host process ends, so they don’t keep taking over host code. Intrusive viruses isn’t a standard term for this behavior in most CEH contexts, whereas TSR specifically describes the persistence and control-transfer behavior.

When a virus stays loaded in memory and continues to run after the infected program finishes, it can control what happens next by intercepting the host’s execution and redirecting it to the viral code. This persistence and redirection is the hallmark of a memory-resident operation. The type that is designed to terminate the current process momentarily and stay resident in memory, ready to take over execution whenever needed, is the TSR virus (Terminate and Stay Resident). By living in memory, it can hijack control flows, run its code, and then hand control back to the host or propagate further.

Worms, on the other hand, are standalone programs that spread across networks and aren’t defined by hijacking host execution in memory. Transient (non-resident) viruses infect files and operate only during that run, leaving memory as soon as the host process ends, so they don’t keep taking over host code. Intrusive viruses isn’t a standard term for this behavior in most CEH contexts, whereas TSR specifically describes the persistence and control-transfer behavior.