What is a polymorphic virus?
Traditional anti-virus programs use signature-based detection methods to detect a virus. It looks for a signature or bit-pattern in a virus to detect the virus. When we scan a computer, the anti-virus program looks into each file and match it with a database of known signatures. The anti-virus program can detect a virus if it finds a known signature in an infected file.
A polymorphic virus is a virus that changes its form each time it infects a new target. As a result, a polymorphic virus does not have any specific bit-pattern or signature associated with it. And, as traditional anti-virus programs rely on signatures to detect a virus, these anti-virus programs cannot detect a polymorphic virus.
In this article, we would discuss:
-
What is a polymorphic virus?
-
How does a polymorphic virus work?
-
How to detect a polymorphic virus?
0 Comments