Logic Bombs

...

It is a special type of malware that waits for an event to occur before it can start its execution.

The event could be a particular time of the day, or when the automatic backup starts,etc. But as soon as the event occurs, something devascating can be expected. This is why it has "bomb" appended to it.

They are often left by someone holding a grudge against the victim.

What makes them so special is that they have no specific signature attatched to them, as each logic bomb can be triggered by different events. This characteristic of it can prevents it from Anti-Virus detection.

So the only way to check for it is to look for any changes being made in the file system, etc.