If virus is password protected?

Viruses and worms
1

Just a question.

I know that files that are password protected can’t be scanned by an antivirus and its always said they are legitimate. But, what if a virus or some other malware was to password protect itself. Is this possible?

Thanks,

Mike

2

Hi mike6688,

Yep, they exist, and existed in 2004, read:
http://jymis.com/passwordViruses.php

This was the first one:
http://www.bitdefender.com/bd/site/presscenter.php?menu_id=24&n_id=79

polonus

3

Ok, thank you polonus that information was really helpful.

Mike

4

Whilst it is entirely possible for this to happen as Polonus shows with the two links, it is still in an archive and must be extracted by another element of the virus or the use of social engineering techniques.

So at that point it would become visible and detectable by and on-access scanner, assuming that the virus contained inside the password protected archive was one that was in the virus signature file.

5

Hi DavidR,

Legit obfuscating of viruses and normal coding anti-reversing tactics are a much greater problem than password protection will ever be. It is the vulnerability gap that eventually is due to colapse. Coding with security in mind should be taught from the start.

polonus