|
|
|
VIRUS NAME: Linux/Alfa
Virus
Characteristics
The Linux/Alfa virus
was included inside a virus collector set that was sent to AVERT. The
malicious code has not been encountered "in the wild".
Linux/Alfa is not a true virus, it doesn't spread recursively. Basically,
there is a dropper file called "a", when run against a target
ELF binary file, that file will be infected. During testing, this routine
didn't work well unless the target files were specifically renamed to
a certain filename - not disclosed here. The modified files didn't spread
recursively.
Symptoms
-Modified ELF binary files
Method
Of Infection
ELF binary files may get infected when they're manually targeted.
Linux/Alfa doesn't spread recursively.
|
|
|
