CodeMixer


· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·



Overview

Vendor Notes:

From the doc: ' utility (subroutine, library, engine, include file, ...) to mix 2 code buffers. The destination buffer will contain all instructions of the source buffers mixed between each other in random order. - to create polymorphic decryptors 1. generate simple decryptor (as in crypt-virus) 2. generate some trash (easy with ETG engine) 3. mix buffers - to mix some commands from host 's startup and from virus's startup - to generate some hash-alike functions'

Alias:

VirTool.Win32.SMF_Example.a [Kaspersky], virus construction tool [F-Prot], Virus Constructor [Panda]

Category:

Trojan Creation Tool: A program designed to create Trojans. Some of these tools merely wrap existing Trojans, to make them harder to detect. Others add a trojan to an existing product (such as RegEdit.exe), making it a Dropper.

Virus Creation Tool: A program designed to generate viruses. Even early virus creation tools were able to generate hundreds or thousands of different, functioning viruses, which were initially undetectable by current scanners.

Similar Pests:

Trojan Creation Tool · Virus Creation Tool

Origins

Date of Origin:

March, 2000

Operation

Storage Required:

  • CodeMixer: at least 61 KB
  • Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Follow these steps to remove CodeMixer from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    April 01, 2005