Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

tabatha

(18,795 posts)
Tue Jan 31, 2012, 01:07 PM Jan 2012

Virus infects worm by mistake

Ten years ago, there was a clear-cut distinction between Trojans, viruses and worms. They all had their own features specific to one family of malware only. As more people connected to the internet, cyber-criminals started mixing ingredients to maximize impact. And here I’m thinking Trojans with worm capabilities or viruses with Trojan features, and so on.

Now, another “practice” has silently emerged: the file infector that accidentally parasites another e-threat. A virus infects executable files; and a worm is an executable file. If the virus reaches a PC already compromised by a worm, the virus will infect the exe files on that PC - including the worm. When the worm spreads, it will carry the virus with it. Although this happens unintentionally, the combined features from both pieces of malware will inflict a lot more damage than the creators of either piece of malware intended.

While most file infectors have inbuilt spreading mechanisms, just like Trojans and worms (spreading routines for RDP, USB, P2P, chat applications, or social networks), some cannot replicate or spread between computers. And it seems a great idea to “outsource” the transportation mechanism to a different piece of malware (i.e. by piggybacking a worm).

Most likely these Frankenmalware, or “malware sandwiches,” take place spontaneously. The virus actually infects by mistake another piece of malware and ends up using its capabilities to spread. Bitdefender’s Antimalware Lab identified no less than 40,000 such malware symbioses out of a sample pool of 10 million files. One such case is the Virtob file infector, whose malicious code has been found infecting worms like OnlineGames, the ancient Mydoom or the more advanced Bifrose backdoor Trojan.

http://www.malwarecity.com/blog/virus-infects-worm-by-mistake-1246.html

(Should there be a "Virus" section under "Computers". I don't know if this quite fits into this category.)

5 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Virus infects worm by mistake (Original Post) tabatha Jan 2012 OP
reminds me of how cells aquired mitochondria phantom power Jan 2012 #1
You are right. tabatha Jan 2012 #2
I've just truncated it all into the "malware" category. It's up to no good. HopeHoops Jan 2012 #3
Your post is one of the reasons I duel-boot. Having 2 windows 7's on... BlueJazz Jan 2012 #4
Interesting. tabatha Jan 2012 #5

tabatha

(18,795 posts)
2. You are right.
Tue Jan 31, 2012, 01:19 PM
Jan 2012

I remember reading about that.

And mitochondria have turned out to be a very important genetic analysis tool.


 

HopeHoops

(47,675 posts)
3. I've just truncated it all into the "malware" category. It's up to no good.
Tue Jan 31, 2012, 03:55 PM
Jan 2012

Adware hogs the shit out of your bandwidth. Trojans can be humorous (like "CupHolder&quot or malicious. Viruses can cause destruction or hide in the background capturing secret information. Worms pretty much concentrate on spreading themselves but can have any of the other characteristics.

They're all created by malcreants (as I call them) and you don't want any of that shit on your computer. The fact that they are piggybacking (symbioses is a perfect term) is not a shock. It was destined to happen. I believe the creators merely have an objective in mind, insidious, damaging, financial gain, or just simple ego, and determine the means to create the infection based on the techniques they are most familiar with. You really can't classify them as anything other than "I didn't want that on my machine!!!" and how they got there is generally not easy to determine. The "virus" checking programs are always a few steps behind. They release updates in a reactive way, not a proactive one. The malcreants are always a few steps ahead.

On a humorous note: One of my late mentors liked to say that he would classify Windows as a virus except that viruses tend to actually DO something.

 

BlueJazz

(25,348 posts)
4. Your post is one of the reasons I duel-boot. Having 2 windows 7's on...
Tue Jan 31, 2012, 06:54 PM
Jan 2012

...different partitions makes it much easier to clean the "Off" partition.

tabatha

(18,795 posts)
5. Interesting.
Tue Jan 31, 2012, 07:08 PM
Jan 2012

I have a computer loaded with both XP and Windows 7, as I make the transition, because I have so much stuff up and running under XP, that it will take a while to make the transition. Will be starting in Feb.

However, I have found the best anti-virus software to be Prevx. I had an issue that I could not get to go away - it was associated with Explorer. I tried the standard anti-virus, special tricks I read about on the internet, and nothing worked, until I contacted Prevx, and they had me download an updated version. Since then, over 7 months now, I have not had single issue (on XP).

Latest Discussions»Help & Search»Computer Help and Support»Virus infects worm by mis...