Polymorphe malware is dangerous, destructive or intrusive software as a virus, worm, Trojan horse or spyware constantly changing ( "morphs"), which makes it difficult to detect with anti-malware programs. Evolution malicious code can occur in various ways, such as changes in file compression and encryption key variables.
Although the appearance of polymorphic in malware code varies with each "change", the essential function usually remains the same. For example, a spyware intended to act as a keylogger continue to do so, even if its signature changes. If the attacker is discovered by an anti-malware vendor and his signature is added to a database for download, the program anti-malware will fail to detect the rogue code after the signature has changed, as if a new virus, worm, Trojan horse or spyware program was born. In this way, the creators of malware gain an advantage over counter-developers.
The best way to deal with polymorphic malware is to use the many and diverse blocking, filtering, detection and suppression programs. Such programmes should be maintained and should be executed as often as possible. Auto-protect features, if available, must be enabled.
Although the appearance of polymorphic in malware code varies with each "change", the essential function usually remains the same. For example, a spyware intended to act as a keylogger continue to do so, even if its signature changes. If the attacker is discovered by an anti-malware vendor and his signature is added to a database for download, the program anti-malware will fail to detect the rogue code after the signature has changed, as if a new virus, worm, Trojan horse or spyware program was born. In this way, the creators of malware gain an advantage over counter-developers.
The best way to deal with polymorphic malware is to use the many and diverse blocking, filtering, detection and suppression programs. Such programmes should be maintained and should be executed as often as possible. Auto-protect features, if available, must be enabled.
