Oh really... A cross platform virus?

[Jerry Feldman]

I read the report on it. Here is the F-secure writeup on it:
http://www.europe.f-secure.com/v-descs/lindose.shtml

It's also called Lindos. F-Secure is calling it a proof of concept virus. 

I don't know how the attachment gets executed, but it looks in the 
current directory and parent directory for ELF binaries, and tries to infect 
them.
On 28 Mar 2001, at 10:49, John Whitfield wrote:

> A cross platform virus?  Interesting.  I'd guess it's theoretically possible
> if the executable portion is interpreted rather than binary; the code logic
> needs that in order to fork into different paths to execute on different
> operating systems.
> 
> But before I'd take it seriously, I'd have to see more information about the
> virus and less about their anti-virus product.
> 
> JMHO,
> John Whitfield
> 
> ------Original Message------
> From: Christoph Doerbeck A242369 <cdoerbec at cso.fmr.com>
> To: discuss at Blu.Org
> Sent: March 28, 2001 2:23:22 PM GMT
> Subject: Oh really... A cross platform virus?
> 
> 
> 
> This reads as "pretty lame" but I was wondering what others know
> about this reported cross platform virus....
> 
> March 27, 2001: Central Command discovers the
> first cross platform virus, W32.Winux
> 
> http://www.avx.com
> 
> 
> 
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to discuss-request at blu.org (Subject line is ignored).
> 
> 
> -----------------------------------------------
> FREE! The World's Best Email Address @email.com
> Reserve your name now at http://www.email.com
> 
> 
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to discuss-request at blu.org (Subject line is ignored).


Jerry Feldman <gaf at blu.org>
Associate Director
Boston Linux and Unix user group
http://www.blu.org
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).