Metamorphic virus

Virus that changes its own code with each infection

A metamorphic virus is one that is capable of rewriting its own code with each infection, or generation of infections, while maintaining the same functionality.

The rewriting process allows each infection to appear different from others, but the changes are not supposed to affect the functionality of the code. This is intended to avoid detection by anti-malware software, but can usually be overcome via emulation or other techniques, and in many cases is deployed in a flawed manner leading to large numbers of misinfections. The complex technology required to do the rewriting is known as a metamorphic engine, and the same such engine may be implemented in several different virus variants.

The term is often used interchangeably with polymorphic virus.

Quick Links

Poll
Do current laws offer enough protection for ethical ('white-hat') hackers?
Yes, the current laws are fine
No, they prevent responsible disclosure of vulnerabilities
The current laws are too lax, we need to be stricter on hacking
I don't know
Leave a comment
View 4 comments

Cybersecurity for Chemical Industry

Virus Bulletin
In this month's magazine:
  • VBSpam comparative review March 2013
  • VB100 comparative review on SUSE Linux Enterprise Server 11
  • Java security in the era of BYOD
  • Ogee whiz
  • A deeper look into the ZeroAccess clickbot
  • Pushdo's new second generation
  • Shellcoding ARM: part 3
  • Phishing and fraud: the make-believe industry
Virus Bulletin 05 2013
Subscribe now!

Virus Bulletin currently has 227,267 registered users.