• MSN
  • Hotmail
  • More
    • Autos
    • My MSN
    • Video
    • Careers & Jobs
    • Personals
    • Weather
    • Delish
    • Quotes
    • White Pages
    • Games
    • Real Estate
    • Wonderwall
    • Horoscopes
    • Shopping
    • Yellow Pages
    • Local Edition
    • Traffic
    • Feedback
    • Maps & Directions
    • Travel
    • Full MSN Index
  • Bing
  • NBCNews.com
  • TODAY
  • Nightly News
  • Rock Center
  • Meet the Press
  • Dateline
  • msnbc
  • Breaking News
  • Newsvine
  • Home
  • US
  • World
  • Politics
  • Business
  • Sports
  • Entertainment
  • Health
  • Tech
  • Science
  • Travel
  • Local
  • Weather
Advertise | AdChoices
  • Recommended: Students can't resist distraction for two minutes ... and neither can you
  • Recommended: Surprise! Prepaid debit cards actually a good deal for consumers
  • Recommended: 'Ransomware' tricks victims into paying hefty fines
  • Recommended: Fake tweet shows country 'sensitive to any news that sounds like terrorism'

Corporate sneakiness. Government waste. Technology run amok. Outright scams. Our effort to unmask these 21st Century headaches and offer solutions that save you time and money.

  • ↓ About this blog
  • ↓ Archives
    • Icons Email E-mail updates
    • Icons Twitter Follow on Twitter
    • Icons Feed Subscribe to RSS
  • 27
    Jan
    2012
    6:41am, EST

    What if a virus infected a virus? 'Frankenware' spotted by security firm

    By Bob Sullivan, Columnist, NBC News

    What if two computer viruses got together on your computer and had a baby? 

    It does happen, says security firm BitDefender, and the result is more mutant than mutt. The firm has taken to calling the third, new piece of malware produced by the odd couple — with apologies to Mary Shelley — "Frankenware." The spontaneous software offspring might be dangerously unpredictable, and it can be harder to defend against, BitDefender says.

    There are so many computer viruses flying around out there that they can't help bumping into one other while wreaking havoc on our computers. In fact, virus writers account for this. In order to protect and defend a hard-won compromised computer, some virus writers actually install their own antivirus programs after they infect a PC. That way, another bad guy can't come along and hijack an already hijacked machine, said Catalin Cosoi, head of the Online Threats Lab at BitDefender, based in Romania.


    But what happens when an already-infected machine is attacked by a virus that inserts code into every executable file it finds on a machine? What if a virus infects a virus?

    In rare cases, says Cosoi, a third virus with unpredictable capabilities is created. But it's not that rare: His firm recently searched 10 million pieces of malicious software and found 40,000 distinct examples of this. 

    "As with evolution, these things happen accidentally," he said. "The combination doesn't usually work, but sometimes it does."

    Follow @RedTapeChron

    It helps if the two pieces of malicious software have complementary features, he said — for example, if one is a keylogger while the other is designed with a wormlike ability to propagate quickly.

    The good news is that, generally, such hybrid viruses can be easier to detect than their parents, because antivirus software that uses "signature" definitions — which identify malicious programs by looking for telltale lines of computer code — have "twice the chance" to detect the troublemaker. On the other hand, some other virus detection tools might overlook the Frankenware because the new file will be a different size from its parents, Cosoi said. 

    John Harrison, a product manager with Symantec, said his firm had never found something like the Frankenware BitDefender is describing, but he did say most PCs that are successfully attacked by virus writers have multiple malicious programs on them. Generally, when a computer has a security vulnerability, the secret doesn't last long, and a hacker feeding frenzy follows.

    "We've seen computers with 25 different pieces of malware on them, even more," he said. "They are often stealthy. ... By the time the user notices the PC has slowed down or there's a blue screen, it could be the 100th piece of malware." 

    So the idea that two such programs could collide and accidentally create a hybrid isn't that far-fetched. But the real question is: Could such Frankenware pull a Frankenstein and wreak unexpected havoc on the real world?

    Cosoi wasn't ringing any alarm bells. Virus writers do what they do for money, and this kind of random, destructive interaction wouldn't profit anyone. For that reason, he thought all the incentives in the computer underworld would probably be enough to limit such possibilities. In other words, virus writers will probably work to prevent such an occurrence because it would hurt their business.

    And, most important, nothing of the sort has been discovered. The 40,000 Frankenware samples that BitDefender has found are no more dangerous than their "parents."

    However, it's important to note that virus writers, even if they seem quite professional in their craft, hardly undertake rigorous product testing. Mistakes happen.

    "If you throw a bunch of malware on a computer, that doesn't automatically mean it will create new malware and it rarely works," he said. "But when it does, it could be dangerous. I can see how a new kind of malware that spreads faster and is more viral than any of the two (parents) ... could turn into something more dangerous."

     Don't miss the next Red Tape:
    *Get Red Tape headlines on your Facebook Wall
    *Follow Bob on Twitter. 
    *Get an e-mail newsletter with Red Tape stories (requires Newsvine registration).

    Comment

    Show more
    Explore related topics: computers, symantec, virus, featured, malware, bitdefender, frankenware

Browse

  • featured,
  • credit,
  • privacy,
  • bob-sullivan,
  • red-tape,
  • consumer,
  • security,
  • fees,
  • lending,
  • computer,
  • facebook,
  • rights,
  • cards,
  • and,
  • hackers,
  • redtaperoadtrip2011,
  • sneaky,
  • internet,
  • identity-theft,
  • how,
  • to,
  • online,
  • save,
  • on,
  • money,
  • twitter,
  • ftc,
  • banks,
  • identity,
  • ads,
  • redtaperoadtrip2010,
  • technology,
  • social-media,
  • google,
  • cell-phones,
  • theft,
  • in,
  • truth,
  • consumers,
  • virus,
  • hack,
  • cramming,
  • government,
  • airlines,
  • web,
  • police,
  • id-theft,
  • bank,
  • scams
Also
Advertise | AdChoices

Bob Sullivan, Columnist, NBC News

I'm a reporter for msnbc.com and I try to write stories that make the world a little bit more fair. My blog, The Red Tape Chronicles, is among the most popular consumer affairs columns on the Web. My recent book, Gotcha Capitalism, was a New York Times best seller. Since 1995, I've written about the troubles created for consumers by both technology, covering topics like privacy, identity theft, computer viruses and hackers.

Bob Sullivan, Columnist, NBC News Blogroll

  • Consumerist
  • Life Inc - The economy and you

Archives

  • 2013
    • May (2)
    • April (7)
    • March (9)
    • February (8)
    • January (11)
  • 2012
    • December (7)
    • November (6)
    • October (7)
    • September (7)
    • August (8)
    • July (6)
    • June (12)
    • May (10)
    • April (7)
    • March (10)
    • February (13)
    • January (14)
  • 2011
    • December (4)
    • November (12)
    • October (12)
    • September (9)
    • August (8)
    • July (6)
    • June (18)
    • May (10)
    • April (20)
    • March (14)
    • February (7)
    • January (8)
  • 2010
    • December (6)
    • November (9)
    • October (4)
    • September (7)
    • August (7)
    • July (6)
    • June (9)
    • May (8)
    • April (9)
    • March (8)
    • February (9)
    • January (9)
  • 2009
    • December (10)
    • November (5)
    • October (8)
    • September (7)
    • August (5)
    • July (8)
    • June (7)
    • May (8)
    • April (7)
    • March (7)
    • February (8)
    • January (6)
  • 2008
    • December (4)
    • November (3)
    • October (8)
    • September (5)
    • August (8)
    • July (9)
    • June (3)
    • May (6)
    • April (9)
    • March (8)
    • February (7)
    • January (8)
  • 2007
    • December (7)
    • November (10)
    • October (8)
    • September (7)
    • August (6)
    • July (8)
    • June (12)
    • May (7)
    • April (2)
    • March (8)
    • February (6)
    • January (7)
  • 2006
    • December (6)
    • November (9)
    • October (2)
    • September (5)
    • August (11)
    • July (7)
    • June (10)
    • May (5)
    • April (7)
    • March (8)
    • February (8)
    • January (8)
  • 2005
    • December (10)
    • November (8)
    • October (6)

Recent Posts

  • Students can't resist distraction for two minutes ... and neither can you
  • Surprise! Prepaid debit cards actually a good deal for consumers
  • LivingSocial database hacked; 50 million customers impacted
  • 'Ransomware' tricks victims into paying hefty fines
  • Fake tweet shows country 'sensitive to any news that sounds like terrorism'
  • Use your personal smartphone for work email? Your company might take it
  • FTC files first-ever cast against mobile phone 'crammers'
  • Cyberattackers more powerful, getting upper hand, experts warn

Other blogs

  • The Body Odd
  • Cosmic Log
  • PhotoBlog
  • US News
  • Open Channel

NBCNews.com top stories

3147,10
© 2013 NBCNews.com
  • Security on NBCNews.com
  • About us
  • Contact
  • Help
  • Site map
  • Careers
  • Closed captioning
  • Terms & Conditions
  • Privacy policy
  • Advertise