Virus writers have created a proof-of-concept virus that targets a widely-used computer forensics tool.

Vred-A infects WinHex scripts, preventing these additions to forensics and data recovery tools from doing anything except infecting other scripts. The virus has not been seen in the wild, and probably never will be.

Interest in the malware is confined to its curiosity value.

Proof-of-concept viruses can be thought of as an attempt by malware authors to show off to their peers or experiment with what might be possible with their adversaries in the anti-virus community. New platforms, such as smart phones, PDAs, or specialist platforms are the usual targets for attack.

Attempts to unpick computer security tools through this process are rare but not unprecedented. Last year, VXers created a proof-of-concept virus that targeted IDA (Interactive Disassembler Pro), a widely used tool that helps anti-virus researchers understand the behaviour of malware samples. ®

Related stories

• MS supplies cops with DIY forensics tool (30 April 2008)
• US laws restrict computer forensics to gumshoes (7 January 2008)
• Don't touch that Microsoft Security Bulletin email (28 June 2007)
• Malware targets OpenOffice users (22 May 2007)
• CanSecWest Attackers improve on JavaScript trickery (20 April 2007)
• Notes on Vista forensics (16 April 2007)
• Linux malware for iPods poses little risk (5 April 2007)
• Man sues MS after FBI uncovers smut surfing habits (6 March 2007)
• Mobile forensics turns up heat on suspects (11 February 2007)
• Vista encryption 'no threat' to computer forensics (2 February 2007)
• Book review Anti-Hacker’s Toolkit (11 July 2006)
• Police expert admits mobile phone forensics barrier (7 July 2006)