OP 20 January, 2019 - 08:33 PM
➖ Polymorphic viruses ➖
These viruses conceal themselves through varying cycles of encryption and decryption.The encrypted virus and an associated mutation engine are initially decrypted by a decryption program.The virus proceeds to infect an area of code.The mutation engine then develops a new decryption routine and the virus encrypts the mutation engine and a copy of the virus with an algorithm corresponding to the new decryption routine.The encrypted package of mutation engine and virus is attached to new code,and the process repeats.Such viruses are difficult to detect but have a high level of entropy because of the many modifications of their source code.Anti-virus software or free tools like Process Hacker can use this feature to detect
