Symantec.com > Enterprise > Security Response > Linux.Hijacker.Worm

Linux.Hijacker.Worm

Risk Level 1: Very Low

Discovered:
May 18, 2001
Updated:
February 13, 2007 11:36:33 AM
Type:
Worm

This is a worm that attempts to insert itself onto systems running Red Hat Linux 6.2 and 7.x, and possibly other System V-based Linux versions, that have already been compromised by any other backdoor that has root privileges. It then attempts to remove any other backdoor Trojans on that system, and then tries to spread itself to other similar system across the Internet.

NOTE: If this worm is discovered on a system, it indicates the system was previously compromised

Antivirus Protection Dates

  • Initial Rapid Release version May 18, 2001
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version May 18, 2001
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Medium
Writeup By: Peter Szor, Orlando Padilla,

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver