Which phase occurs after viruses spread where they start corrupting the files and programs of the host system?

• A. Covert Channels
• B. IExpress Wizard
• C. Attack Phase
• D. Virus

Answer: (C)

When malware finishes spreading and establishing itself on the host, it moves into the stage where it carries out its harmful actions—the payload. This is the attack phase, where the virus executes code designed to damage, modify, or corrupt files and programs on the system. The goal is to cause disruption or achieve a malicious objective.

Covert channels are about hidden communication paths attackers use, not about damaging data. IExpress Wizard is a packaging tool for creating self-extracting archives, not a phase of malware behavior. A virus is the malicious program itself, not a phase of its lifecycle.