Question

Write short note on polymorphic virus.

Answer 1

In computer terminology, polymorphic code is code that uses a polymorphic engine to mutate while keeping the original algorithmintact. That is, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all. For example, 1+3 and 6-2 both achieve the same result while using different values and operations. This technique is sometimes used by computer viruses, shellcodes and computer worms to hide their presence.[1]

Answer 2

Polymorphic virus:

• As the name suggests, the polymorphic virus is a type of harmful virus that can exhibit multiple forms.
• It particularly affects data types and functions. Since it displays many forms and changes from one form to another, it becomes very difficult for an anti-virus or anti-malware program to detect.
• Polymorphic viruses take help from the mutation engines to alter their decryption routines on infecting a machine so that when the infection spread and other new targets are acquired and infected, the file may transform itself to a completely new identity so that the scanners are not able to follow up and as a result it is not detected.