• MSN
  • Hotmail
  • More
    • Autos
    • My MSN
    • Video
    • Careers & Jobs
    • Personals
    • Weather
    • Delish
    • Quotes
    • White Pages
    • Games
    • Real Estate
    • Wonderwall
    • Horoscopes
    • Shopping
    • Yellow Pages
    • Local Edition
    • Traffic
    • Feedback
    • Maps & Directions
    • Travel
    • Full MSN Index
  • Bing
  • NBCNews.com
  • TODAY
  • Nightly News
  • Rock Center
  • Meet the Press
  • Dateline
  • msnbc
  • Breaking News
  • Newsvine
  • Home
  • US
  • World
  • Politics
  • Business
  • Sports
  • Entertainment
  • Health
  • Tech
  • Science
  • Travel
  • Local
  • Weather
Advertise | AdChoices
  • Recommended: Rebirth after the big storm: How one small town dug out, spruced up and lived on
  • Recommended: 'Like a Hollywood movie': Driver survives I-5 bridge collapse into Wash. river
  • Recommended: 'Winter' - maybe even snow - to return for Memorial Day weekend
  • Recommended: Cars, drivers plunge into river after Wash. I-5 bridge collapse

NBC News reporters bring you compelling stories from across the nation. For more US news, follow us on Twitter and Facebook.

  • ↓ About this blog
  • ↓ Archives
    • Icons Email E-mail updates
    • Icons Twitter Follow on Twitter
    • Icons Feed Subscribe to RSS
  • 27
    Jan
    2012
    6:41am, EST

    What if a virus infected a virus? 'Frankenware' spotted by security firm

    By Bob Sullivan, Columnist, NBC News

    What if two computer viruses got together on your computer and had a baby? 

    It does happen, says security firm BitDefender, and the result is more mutant than mutt. The firm has taken to calling the third, new piece of malware produced by the odd couple — with apologies to Mary Shelley — "Frankenware." The spontaneous software offspring might be dangerously unpredictable, and it can be harder to defend against, BitDefender says.

    There are so many computer viruses flying around out there that they can't help bumping into one other while wreaking havoc on our computers. In fact, virus writers account for this. In order to protect and defend a hard-won compromised computer, some virus writers actually install their own antivirus programs after they infect a PC. That way, another bad guy can't come along and hijack an already hijacked machine, said Catalin Cosoi, head of the Online Threats Lab at BitDefender, based in Romania.


    But what happens when an already-infected machine is attacked by a virus that inserts code into every executable file it finds on a machine? What if a virus infects a virus?

    In rare cases, says Cosoi, a third virus with unpredictable capabilities is created. But it's not that rare: His firm recently searched 10 million pieces of malicious software and found 40,000 distinct examples of this. 

    "As with evolution, these things happen accidentally," he said. "The combination doesn't usually work, but sometimes it does."

    Follow @RedTapeChron

    It helps if the two pieces of malicious software have complementary features, he said — for example, if one is a keylogger while the other is designed with a wormlike ability to propagate quickly.

    The good news is that, generally, such hybrid viruses can be easier to detect than their parents, because antivirus software that uses "signature" definitions — which identify malicious programs by looking for telltale lines of computer code — have "twice the chance" to detect the troublemaker. On the other hand, some other virus detection tools might overlook the Frankenware because the new file will be a different size from its parents, Cosoi said. 

    John Harrison, a product manager with Symantec, said his firm had never found something like the Frankenware BitDefender is describing, but he did say most PCs that are successfully attacked by virus writers have multiple malicious programs on them. Generally, when a computer has a security vulnerability, the secret doesn't last long, and a hacker feeding frenzy follows.

    "We've seen computers with 25 different pieces of malware on them, even more," he said. "They are often stealthy. ... By the time the user notices the PC has slowed down or there's a blue screen, it could be the 100th piece of malware." 

    So the idea that two such programs could collide and accidentally create a hybrid isn't that far-fetched. But the real question is: Could such Frankenware pull a Frankenstein and wreak unexpected havoc on the real world?

    Cosoi wasn't ringing any alarm bells. Virus writers do what they do for money, and this kind of random, destructive interaction wouldn't profit anyone. For that reason, he thought all the incentives in the computer underworld would probably be enough to limit such possibilities. In other words, virus writers will probably work to prevent such an occurrence because it would hurt their business.

    And, most important, nothing of the sort has been discovered. The 40,000 Frankenware samples that BitDefender has found are no more dangerous than their "parents."

    However, it's important to note that virus writers, even if they seem quite professional in their craft, hardly undertake rigorous product testing. Mistakes happen.

    "If you throw a bunch of malware on a computer, that doesn't automatically mean it will create new malware and it rarely works," he said. "But when it does, it could be dangerous. I can see how a new kind of malware that spreads faster and is more viral than any of the two (parents) ... could turn into something more dangerous."

     Don't miss the next Red Tape:
    *Get Red Tape headlines on your Facebook Wall
    *Follow Bob on Twitter. 
    *Get an e-mail newsletter with Red Tape stories (requires Newsvine registration).

    Comment

    Show more
    Explore related topics: computers, symantec, virus, featured, malware, bitdefender, frankenware

Browse

  • featured,
  • crime,
  • military,
  • weather,
  • california,
  • updated,
  • florida,
  • environment,
  • us-news,
  • shooting,
  • new-york,
  • texas,
  • education,
  • chicago,
  • police,
  • gulf-oil-spill,
  • kari-huus,
  • nbcnewyork,
  • los-angeles,
  • murder,
  • new-jersey,
  • guns,
  • afghanistan,
  • obama,
  • colorado,
  • sandy,
  • trayvon-martin,
  • nbclosangeles,
  • barack-obama,
  • crime-and-courts,
  • politics,
  • gay,
  • veterans,
  • connecticut,
  • fire,
  • arizona,
  • snow,
  • crime-courts,
  • religion
Also
Advertise | AdChoices

Bob Sullivan, Columnist, NBC News

I'm a reporter for msnbc.com and I try to write stories that make the world a little bit more fair. My blog, The Red Tape Chronicles, is among the most popular consumer affairs columns on the Web. My recent book, Gotcha Capitalism, was a New York Times best seller. Since 1995, I've written about the troubles created for consumers by both technology, covering topics like privacy, identity theft, computer viruses and hackers.

Bob Sullivan, Columnist, NBC News Blogroll

  • Consumerist
  • Life Inc - The economy and you

Archives

  • 2013
    • May (378)
    • April (608)
    • March (548)
    • February (510)
    • January (563)
  • 2012
    • December (457)
    • November (460)
    • October (477)
    • September (432)
    • August (525)
    • July (519)
    • June (508)
    • May (566)
    • April (538)
    • March (576)
    • February (471)
    • January (417)
  • 2011
    • December (455)
    • November (190)
    • October (9)
    • September (3)
    • August (51)
    • July (8)
    • June (3)
    • May (12)
    • April (5)
    • March (3)
    • February (1)
    • January (8)
  • 2010
    • December (5)
    • November (1)
    • October (2)
    • September (28)
    • August (40)
    • July (35)
    • June (177)
    • May (50)
    • April (9)
    • March (2)
    • February (2)
    • January (4)
  • 2009
    • December (5)
    • November (5)
    • October (2)
    • September (11)
    • August (4)
    • July (12)
    • June (1)
    • May (1)
    • April (1)
    • March (3)
    • February (3)
    • January (2)
  • 2008
    • December (3)
    • November (2)
    • October (6)
    • September (30)
    • August (26)
    • July (10)
    • June (4)
    • May (8)
    • April (13)
    • March (9)
    • February (7)
    • January (6)
  • 2007
    • December (10)
    • November (6)
    • October (22)
    • September (11)

Most Commented

  • Man with ties to Boston bombing suspect admits role in 2011 murders; shot during FBI questioning (2113)
  • Boy Scouts vote to lift ban on gay youth (4256)
  • US judge rules department of 'toughest sheriff' engages in racial profiling (2536)
  • At least 51 killed, including 20 children, as tornado tears through Oklahoma (1809)
  • Scouts await decision on gay membership (2226)
  • Zimmerman defense releases texts about guns, fighting from Trayvon Martin's phone (1747)
  • Jodi Arias pleads for jury to spare her life, says, 'I want everyone's pain to stop' (854)

Other blogs

  • The Body Odd
  • Cosmic Log
  • Red Tape Chronicles
  • PhotoBlog
  • Open Channel

NBCNews.com top stories

3147,10
© 2013 NBCNews.com
  • US news on NBCNews.com
  • About us
  • Contact
  • Help
  • Site map
  • Careers
  • Closed captioning
  • Terms & Conditions
  • Privacy policy
  • Advertise