Leaps and bounds

2006-12-01

Peter Ferrie

Symantec Security Response, USA

Editor: Helen Martin

Abstract

Peter Ferrie describes a virus that comes in both 32-bit and 64-bit versions and which uses an entrypoint obscuring technique that no one has used before: W32/Bounds and W64/Bounds!AMD64.

The full article is available to registered users. Click here for free registration or, if you already are a registered user, login to access the full article.

Magazine


	December 2006 PDF Please register to download the PDF Comment What is anti-virus software? News Festive greetings In the picture? Stocking filler Malware prevalence report October 2006 Analyses Leaps and bounds What next? Trojan.Linkoptimizer Feature Trojan crimeware - is it worth all the fuss? Comparative review VB Comparative: Windows XP Professional x64 Edition Call for papers VB2007 Vienna Spam Bulletin Anti-spammer loses case The medium or the message? Dealing with image spam See also Virus Bulletin archives How to become a subscriber Reprints

Quick Links

Poll

The Japanese government is reported to have commissioned a 'defensive virus'. Is 'defensive' malware ever a good idea?
Leave a comment
View 11 comments

Jobs


	In Virus Bulletin's jobs pages among others: Software Engineer (Broomfield, Colorado, United States) Security Response Engineer (Dublin, Ireland)

Virus Bulletin currently has 224,243 registered users.

Fighting malware and spam

Leaps and bounds

Peter Ferrie

PDF

Comment

News

Malware prevalence report

Analyses

Feature

Comparative review

Call for papers

Spam Bulletin

See also